last executing test programs: 5m26.734456069s ago: executing program 1 (id=5960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b40)="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", 0x123}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e800"/162, 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000004940)="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", 0xd96}], 0x4}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4072, 0xfe8, 0x0, 0x0}, &(0x7f0000000000)=0x40) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000340)={'gre0\x00', 0xffff, 0x8d0}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 5m26.334693545s ago: executing program 1 (id=5963): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r2, 0x1, 0x4000, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x400c890}, 0x4080000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtaction={0x14, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r4, @ANYRES16, @ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESHEX=r3, @ANYRESDEC=r4], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c30000000000000000000008", @ANYRES32, @ANYBLOB="0000d40000000000a5c50b000009"], 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) accept4$phonet_pipe(r6, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bond0\x00'}) write$cgroup_int(r5, &(0x7f0000000080)=0x6, 0x12) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x164}}, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r9 = socket$unix(0x1, 0x5, 0x0) bind$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x402) r10 = socket$unix(0x1, 0x5, 0x0) connect$unix(r10, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m25.054517737s ago: executing program 1 (id=5971): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000004900050c27bd7000fddbdf250a000100", @ANYRES32=0x0, @ANYBLOB="115877fe7a5d10cc3b0000001400000200"/32], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) read(r2, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000023c0)={0x1118, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, "", [@generic="270bd7e8db0ea8482a4ba862269347a7eaae93ed89a3f54a74f429fd08e79890c7a79883e5523147b1ecbe1dca99a21028e2e062e6f881612f757dbbe0f36ba1c0479ec54e686071cccc7f04b5ead2ecbd8365bee90c24b026c50995faaeccd0cdc0486f0e42dd97ed41044c858e62f07db7a6a3cfdad11a986c26cb44b76fe02a252690e363a3ecc2c90dd971291178946a5bcd007d4b57c979dff0c8560853b71e9865c25f7a97a448f651a5adb4436c45f430730f7a19cbf4ab369c88851b814ac0fe2af393ee2c7e79950defdb032b8d1f9338d39a85a551e80f47972bb801490d0d78f68f3574d1f37d03f87c36291e73", @generic="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"]}, 0x1118}, {&(0x7f0000000380)={0x1cc, 0x39, 0x800, 0x240, 0x25dfdbff, "", [@typed={0x8, 0x897, 0x0, 0x0, @u32=0xff}, @typed={0x56, 0xe5, 0x0, 0x0, @str='\x02\x919\xa3l\xe6\xa8\x9c_1\x93\xbc\x9b0\x9c\xcf\x04\x018|\x8b\x19\r\xe9\x00n\xa8\xf6\xb6%\xc8#o\x86G\x86\xf5Dl{\xcd&\x0e\xef\t!\xb9\x14}\xc35d\x01\xb3\x17F\xe1\x0e\xe7\x17\xc0\xe6\xfb\xd6\xf7\xa2\x18\x87\x0f\x9e~\x8b\xfc\xa7\'\xc5\n\xb94\x0f!\x9c'}, @generic="aff0710a75fd0cc594e51513e7ee73", @nested={0x31, 0x89, 0x0, 0x1, [@generic="5afa8670d8fd57f4d4", @typed={0x14, 0x144, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0xfb}, @typed={0x6, 0x1, 0x0, 0x0, @str='\x00\x00'}, @nested={0x4, 0xcd}]}, @generic="b853db32f5e8520a0531d07c52e14f1b32c2e2ac8f59d97586913b3e9d5984a5", @nested={0xf8, 0x4d, 0x0, 0x1, [@generic="16b45663d6345a172efb857a1d22830e249a78aa8fa3daa66fe1c8538552", @nested={0x4, 0x9a}, @generic, @nested={0x4, 0x94}, @typed={0x8, 0xe2, 0x0, 0x0, @fd=r1}, @generic="32812073249fd2d938e48f1fe52d9c7eb96b7dc52a7e041bf0922a2f86214b99e5d265045f8e8baa02348e41220909219c310b56cdb3d836f0d7aab83a00a4a04a26875ad1f903fd7521560f543b44ccd2ff2bd250bd146acaa9e6a3f78742770922d2b6d8b0db0aecb9d2209e91317fb7983a60e8934a210a6f98aa475b1b74c3bf26fee489b0c4a4aa8c42c730f42b2f70847e13c3c0c3e445693e69a3a5c80ce5748132bf38d4bab7cc500b840bfb0981a7a37da99fd6addbcf83a7194f95070f", @typed={0x4, 0x146}]}]}, 0x1cc}], 0x2, 0x0, 0x0, 0x1}, 0x4008001) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000180)) (async) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000180)) 5m24.37280699s ago: executing program 1 (id=5974): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x400c4c5}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000826bd7000fbdbdf252500000008002c00ff0100000600ff010000000005002b000200000005002e0008000000050029000000000008002c000900000008802c0074d90000056f724a3784002a0002000000d72a5db25964bd4e204271b695d0bd9a1ad8fe534193bed5ac6a467ef9cd209cce41abb1e33cf35e3e772cb609482b4597deafbad042177e128730fc84616de2236d247a33ddb47d1e58c3898c96a039dbc2ef"], 0x54}, 0x1, 0x0, 0x0, 0xd}, 0x40) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m23.82879013s ago: executing program 1 (id=5976): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 4m46.338003049s ago: executing program 1 (id=5977): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)=@getpolicy={0x58, 0x15, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in=@local}, 0x6e6bba, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x58}}, 0x0) unshare(0x6a040000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m30.797624853s ago: executing program 32 (id=5977): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)=@getpolicy={0x58, 0x15, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in=@local}, 0x6e6bba, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x58}}, 0x0) unshare(0x6a040000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m5.979454514s ago: executing program 0 (id=6968): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0xe0, 0x428, 0x338, 0x338, 0x338, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007901000000000000001709ff00c5c851391dd564f30000006b8bff176ada489b10bab385fc0ad1640db59b8b212c2dccfde655382a404a81bfc11a10951c064ce41f4d14bd99eff6e40c866fe12fa272ac0ab7f8ba383548338d3249a558f83db9"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 1m5.970705213s ago: executing program 4 (id=6969): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0xf, 0xd95c}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000400)={{}, {@val={r1}, @max}}) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000440)={0x9, @remote}, &(0x7f0000000480)=0x12, 0x80800) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f00000005c0)=""/126, 0x7e, 0x0, &(0x7f0000000640)=""/221, 0xdd}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r3, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000800)={0x0, 0x4, 0x30, 0xd76, 0x81}, &(0x7f0000000840)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000880)={r5, @in={{0x2, 0x4e21, @multicast2}}, 0x78a6, 0x4}, &(0x7f0000000940)=0x90) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, 0x464, 0x10, 0x70bd28, 0x25dfdbfb, "166c4f98cb551df47a9889ba0005c4ad125b83dc79fbf0b2558bca03903c433c416c114b0513e26f7dbfd0dfbe23ca889070a0083e23b8298353a78c8e1a447aca500ed875341b7a58f705ec2c4ce7e9d52c3d9a7c3702a2f3a49f47a0682d3d901f2f7976d1d1d53017be7f98d8", ["", "", "", "", "", "", "", "", "", ""]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000ac0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r8, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xf}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1081}, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000d00)={r5, 0x2}, &(0x7f0000000d40)=0x8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r7) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000dc0)={0x7, 'veth0_to_bridge\x00', {}, 0xa}) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000e40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x11c, r9, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x88, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d6ee2719d8c96fc400e99651ac864c4d"}]}, @NL802154_ATTR_SEC_KEY={0x64, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x10}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7ff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4040}, 0x1) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001080), r7) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x60, r11, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x40801}, 0x4000850) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r7, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x400c010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)=@deltclass={0x34, 0x29, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x10}, {0xc, 0xd}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xb1}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c081}, 0x20000000) 1m5.869013393s ago: executing program 0 (id=6970): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x81}, [@typed={0x8, 0x15e, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000000)={0x2, 0x0, 0xfffffffffffffff7, 0x59, 0x7, 0xee}) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000e000000100000000000000000d0001007544b5ded1797a3200000000"], 0x54}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000140)=0x2) 1m5.834619738s ago: executing program 4 (id=6971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) close(r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) 1m2.9734426s ago: executing program 0 (id=6974): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x347000, &(0x7f0000000040)={@_ha_fsid={[0xfffff2c5, 0x3]}, {0x100, 0x7, 0x6c, 0x8}}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2ac, r1, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6eb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8524}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3e0c}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7611}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa87f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2ca}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}]}]}, @NL80211_ATTR_REG_RULES={0x184, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffe00000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xf3a}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x17fc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r1, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040880}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000640)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x17eed48e460c8c3c}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r4, 0xeaf5723a7733d2a, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r0, 0x0, 0x2d, 0x7e, &(0x7f0000000800)="abf9eda9e123fc07b0474d1e22470308113b45453718603b350f981ed1ae927ffc34f7987281b602013e42c98a", &(0x7f0000000840)=""/126, 0x2, 0x0, 0xda, 0xac, &(0x7f00000008c0)="4bdeacf8211403400456cd83e8f759d1cce3eca61e089c4bce19d6d86d86375178501feca2409b4a263d4bb19d6e9679056140c27c55b0773c84d90e4774ccd1deb11d1e4b10e6512d4d89f875aabfb4777cb1ab8f49be2ee8f55ed35a489b36abdbfce3a584a2f192a6c5a8146da33c3b71ee125c23485973422d728e0f3b7585d6155bee544556750f9ebce6019eaf63856fbab2085ae83df001db5f096149c64ab275fb5b70954710b6be19c65b95ab71a2efe7930e460b81704e40a9338d44d41e4b798c2cfb8baebf4892565a1d446eb0f27fde1f5ec931", &(0x7f00000009c0)="f0edc48144740a01fa533b97620af906c841bc4cc69b826df75403e09177ba09c96159f142ebb960da1c758da858481cfb54429a4eb91eb8b60d805f8167f10cd459d1c3bce67e55caeca7d3ede6209cbabcc8d7d2784965d7adf2acdd7c45262fcdbc8a5fe02b36eeacdb3a7afe4634e517eafcfb1bb3cfc47b599d0bf3bdac6b1f0470458d49dda1f33587a0c975e19d644bbd9d6ea08bfa20ab482443f419d64732c7bb88bb53a2875a38", 0x2, 0x0, 0x1a357ca5}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r0, 0x0, 0xde, 0xe9, &(0x7f0000000b00)="ef595fdb378e5a81fb371979bfbbfb11db7859e875e6bcbfc685f0fdd37f01e86e19ed2584141403e744532207c2ca2d89fc9f2ddb11eb54f575f88d5331105a197fc01f62f4c7a6e8de547257a38588bb1b66831cb5d051693b7e0048c861446f3ab06537171677455265c4e918abebc3f7ddb791e50168509610c65a1e2d3b2c586e11d32fd061810b0a04a19dcdf4b90f332c58b51af8fde76b971b13692deee1d514b8a7e5cfbdc8a2aab652da2a7039f19eff8ec062c9a9f33dc8d20480af6b8edbb4053cece85debab517aecc14e5e7936fb19efdc9cdc8910e126", &(0x7f0000000c00)=""/233, 0x8, 0x0, 0x4d, 0x1000, &(0x7f0000000d00)="93077e04100319c4df118de42dfe65147377aebe0ad1c5797877a39056b8ee03c3ece5c22e43cd0ed34d2cba23d2c4065df71abffd61ad8db7a1216d561922f731b4974d201bd9752b9c8c7b34", &(0x7f0000000d80)="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", 0x0, 0x0, 0x9}, 0x50) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001e00)={0x0, {{0x2, 0x4e24, @multicast1}}, 0x0, 0x2, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e23, @rand_addr=0x64010100}}]}, 0x190) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001fc0), r5) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002040), r5) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x14, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002240)={&(0x7f0000002180)={0x88, r4, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040014}, 0x1) writev(r0, &(0x7f0000002440)=[{&(0x7f00000022c0)="437ddbb20ecb094cc3775f506cd4a3e6950e83b16c6df2966b529320151a969962954795109fda843affd46e96e1cd8c239f5d2fa4870dceaff0f5ffb859415869a66d464ffc34cd4a1e82ddc5cfb8b3d554c7ec11625b59238007b9e1a7486df4c6f897881674095d5e02bfbd8998fc57be7e0b057dac24ed602d1f89abef34d3477ce7d4706cdfd87be4269dbfc9675d1cc91033a0de2f8ba5b38456d20aec2fee7dc9ce19424d76a550afa27798ccb4a5c9bd4af2147c69685c20c58ea1f7957a70fc7950c154194b6294494a47e0bd76914a9c20", 0xd6}, {&(0x7f00000023c0)="277ab3ba23d996fe186285ad590bf681180fe246c471649b6cbd4440ca034c6f7b53b37c13fac85d3f208d72c44b7435c86e8b2e6cd2a1500da03e8fcb62ca81d6c69f31e74d5e3817b35a62594e006aafd0d110360d39fc6624d31475ab", 0x5e}], 0x2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000024c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x5c, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}]}, 0x5c}}, 0x20004045) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r9, 0xd0009412, &(0x7f0000002680)={0x0, 0xda}) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000003680)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000003700), &(0x7f0000003740)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000003780)={0x1, [0x0]}, &(0x7f00000037c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000003800)={r11, 0x2}, 0x8) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r12, &(0x7f0000003900)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x10, 0x3f6, 0x1, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40) 1m2.278806561s ago: executing program 0 (id=6978): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0x6}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x1, 0x5, 0x20040, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x3}, 0x50) 1m2.000592179s ago: executing program 0 (id=6981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000240)="2e75e0b9e390e734f036916719f4835029225682221570490f3fc539a84143c1bfbc890d0f7a418ff3c20db6d9dd20362c7d79a6f635257acf08cdb19de8f6d17205fd9b141a2d039fe5cc833d5541c7a0abd984c6f706e4f37e4033b4465f4b1247bcf33f6962cd088134e76f17b83583ad1715263658fefebd8a772e6cfc4ba8afe735", 0x84}], 0x1}, 0x40000000}], 0x1, 0x20080058) 1m1.706938851s ago: executing program 0 (id=6983): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e}, 0x90) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='hsr0\x00') sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m0.996437936s ago: executing program 2 (id=6987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0xd, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000340)={0x10003, {{0x2, 0x800, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0xa9) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0d00000004000000040000000300000000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001f00000001b5f7504bddb0faa193baa696e80000000000000000280040000100000000040000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r7}, 0x38) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3832, 0xffffffffffffffff, 0xe08b4000) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r9) socket$inet6(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) recvmmsg(r5, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x21, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) 1m0.282787207s ago: executing program 5 (id=6990): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) getsockopt(r3, 0x1, 0x24, 0x0, &(0x7f0000000300)) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async, rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) (async) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x12022, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x5f5e0ff}, @fwd={0x3, 0x2}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4096, 0x35, 0x1000, 0xa}, 0x20) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d022abd7000fedbdf25010000000500060002000000050005000400000008000300060000000800040026000000bf1d650631b251c195b34adfc8fbd1eae882c7986ee2e538de424821fc77bff068027fb3070b1289a5838a76d29c5f73183bfd2764be18a0d2b9b2"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) 59.824286366s ago: executing program 5 (id=6992): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r1, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40048c0) recvmsg$kcm(r0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 59.557798383s ago: executing program 5 (id=6993): r0 = socket(0x28, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0), 0x69) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24000094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x3, r4}, 0x38) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0x20000000}) 59.525634227s ago: executing program 3 (id=6994): socket(0x1a, 0x3, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x0, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x7d, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x9, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x15}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400e80010fcfffffffcdbdf2500000000000000", @ANYRESHEX=r1, @ANYRES8=r2, @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x80) 59.159720181s ago: executing program 3 (id=6995): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020104020a0000000000000000000000030006000000000002000000ffffffff00000000000000000300050000000000020000000000000000000000000000000200130006"], 0x50}, 0x1, 0x7}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x2b21}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}]}}}]}, 0x5c}}, 0x24000000) 59.068149172s ago: executing program 5 (id=6996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) close(0x3) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xc, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0xfffc, 0x0, 0x1000], [0x6e29, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8) 58.624636906s ago: executing program 5 (id=6997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r3, 0x70b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000a0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, &(0x7f0000000380)) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x98, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "31181d9cf558d835ab85b6de0df5f4001633a2bfe0c06e38edaa9132e231ff41"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "8a92e7d5b4c2d993c9bcc880cb4588c9e1df540c242e9a1796f01a82c573de3b"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048946) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r8, 0x89e5, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001914019e"], 0x10}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x62, 0x1ff}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r11, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400a011}, 0x800) r12 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r12, 0x80585882, &(0x7f0000000180)) 58.477278106s ago: executing program 4 (id=6998): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmmsg$inet6(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@flowinfo={{0x14, 0x29, 0xb, 0x10001}}], 0x18}}], 0x1, 0x8001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='GPL\x00', 0x80}, 0xffffffd6) 58.462840533s ago: executing program 3 (id=6999): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, 0x0, &(0x7f0000000080)=0xc00) write$tcp_congestion(r0, 0x0, 0xeffd) 58.443478378s ago: executing program 2 (id=7000): r0 = socket(0x26, 0x800, 0x4) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close(0x3) 58.287523028s ago: executing program 3 (id=7001): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x820) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xfd}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7f}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) (async, rerun: 32) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c) (rerun: 32) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000300), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x2, 0x6, 0x105, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, r5, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}}, 0x1) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x29, 0x81, 0x47, 0x2, 0x0, @mcast1, @mcast2, 0x20, 0x8, 0xa08f, 0x8}}) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4ee}]}, 0x54}, 0x1, 0x0, 0x0, 0x1000}, 0x2000040) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r5, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3c}, @void, @val={0xc, 0x99, {0x101, 0x65}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x200080e0) (async, rerun: 64) bind$netlink(r4, &(0x7f0000000a00)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) (async, rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), r0) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r9, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c00)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x40) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000ec0)={{r4, &(0x7f0000000d40)='nl802154\x00', 0x2000, &(0x7f0000000d80)={@align=0x1, {0x2, 0x7, 0x6, 0x9}}, 0x2, &(0x7f0000000dc0), &(0x7f0000000e00)=0x5}, {[0x7, 0xfffffbff, 0x3, 0x7fffffff]}, 0x20000, 0x64, &(0x7f0000000e40)=""/100}) ioctl$sock_inet6_SIOCDIFADDR(r12, 0x8936, &(0x7f0000000f40)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x77, r8}) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000f80)={{{@in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x459, 0x4e20, 0x5, 0xa, 0xa0, 0x90, 0x2f, 0x0, 0xffffffffffffffff}, {0x8001, 0x7fff, 0x3, 0xa3f1, 0x2, 0x9, 0x6, 0x8000000000000001}, {0x9, 0x6, 0xde5, 0x7}, 0x8000, 0x0, 0x3, 0x1, 0x3, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d2, 0xff}, 0x2, @in=@local, 0x3502, 0x4, 0x2, 0x7, 0x1, 0x166190f9, 0xe731}}, 0xe8) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r13, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000c92) 58.179876305s ago: executing program 4 (id=7002): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x6, 0x0, 0x0, 0x69, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0xd7, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcf}, 0x90) 58.178959147s ago: executing program 2 (id=7003): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x200, 0x7, 0x9fa1}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x9aee, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0xe, r0}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0xec, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x16}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x8000000000000004}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47bf48b3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_USERDATA={0x39, 0xc, "bf1bb3e0cf3fc8bb5b639c91644ed212ae2bcbf76668ba304df0ee7cc43052a78758361cf39d03f8735b36e1b49bcf063866f382b9"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x114}, 0x1, 0x0, 0x0, 0x44000}, 0x10) 58.112414455s ago: executing program 4 (id=7004): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r1, &(0x7f0000000080)='\x00', 0x200041, &(0x7f0000000100)={@align=0x5, {0x81, 0x0, 0x1ff, 0x4}}, 0xffffffff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)}, {[0x3, 0xfffffffa, 0x8, 0x9]}, 0xfcff, 0x51, &(0x7f0000000300)=""/81}) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000480)=0x4, 0x4) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async, rerun: 64) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x14, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000080) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 57.985996404s ago: executing program 3 (id=7005): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000003c0)=0x7, 0x4) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x43}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711063000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x154, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3f}}}}, [@NL80211_ATTR_REKEY_DATA={0xa4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9b2d81b0d6f92d17df00000000000000000000000000000000021fa45500"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cc5b30220c2e6d0c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9aef38551d7396a8"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5e06ea57a38542a49e33844220e920b734e2c1a73341873437b00e163f97a6aa"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0abe6686c3232566038e00ac4f20fc37"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="96d4b32f0214ac3844a4b8ad14a37869d4bb30e5df9a0d899a1ee0ef01c08bb6"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1ecc6eca1f0b07ef50fb6b46979ab7dfd1d0ddedd60650b0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6fda929c663aa5b4"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1eefc34bc10007de3c664f63bce732de588170ef030d98fdb970b122496564a8"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9d70ec7553654fcb1b783afbf47b8a755903093c61fc080df547161b7d7f5e0a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2c46}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1ec39433b7d4e2bc"}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x860) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bind$bt_hci(r0, &(0x7f0000000940)={0x1f, 0x4, 0x2}, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r4, r5, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup=r5, r4, 0x2f, 0x2028, 0x4}, 0x20) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x5, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="4100f60001000000000000000001"], 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv4_deladdr={0x48, 0x15, 0x2, 0x70bd2b, 0x25dfdbff, {0x2, 0x38, 0x82, 0xfe, r9}, [@IFA_FLAGS={0x8, 0x8, 0x4c0}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x3ff, 0x10001, 0xa}}, @IFA_CACHEINFO={0x14, 0x6, {0x1ba7, 0x1, 0xfff, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x54, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x28044000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x200, 0x0, 0x25dfdbff, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0x101}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 57.72717115s ago: executing program 2 (id=7006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r3 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f0000000640)=0x3) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff00000000390000000e0021006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}}, 0x480c0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c000008000180040004803c14028036"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 57.697164912s ago: executing program 2 (id=7007): r0 = socket(0xa, 0x5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000002c0)=r1) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16=r0, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100001000000800030000000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000800) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 57.47690466s ago: executing program 5 (id=7008): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x3, @mcast1}}}, 0x88) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'wlan0\x00', @random="685fe6d1721b"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) bind$netlink(r4, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000280)=0x4, 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001042abd70000000d6656a5a5079", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006000e0003000000"], 0x44}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001042abd70000000d6656a5a5079", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006000e0003000000"], 0x44}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd70000000000017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989040004"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000) (async) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000) 57.334492821s ago: executing program 4 (id=7009): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92) (async) recvmsg(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000180)=""/133, 0x85}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x5}, 0x2000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410001002a007000040000000100000004004480140001800d00108006000a003a000000e10000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x25dfdbfc, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000000)={@private=0xa010100, @loopback, 0xffffffffffffffff, "2facec81571b6f11948d4ba1f5fa17fc06d410945fa587e31d6be4352223ea8e", 0xe0b7, 0x9}, 0x3c) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 57.255164566s ago: executing program 3 (id=7010): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="571932f70bd0840339daec3c9064a79de304ead22699b43cc356166d135df91288407d0022095a48a921ed4a107733b17c7e6fa59fbefb4ba1bb3f62323cc9b95649b692f32cd02189d032998ef4c134f07c6cffa1e8aa7d9ed8601919ef463ba0f97c4976465fc9b580b299ee6accc54fb0252355119587ce0b342ad33d43cbfd49a7002c9805ce51eb63db9157e858c8f29792b2848dc4fa4161bb1b2e4caf128312c2e0da35d3a36f1856b158b065f5263baba6761068ff18159c0b686e61f04287427751562d4d204662991d45480e39acc5fe23dfb338"], 0x14}}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="571932f70bd0840339daec3c9064a79de304ead22699b43cc356166d135df91288407d0022095a48a921ed4a107733b17c7e6fa59fbefb4ba1bb3f62323cc9b95649b692f32cd02189d032998ef4c134f07c6cffa1e8aa7d9ed8601919ef463ba0f97c4976465fc9b580b299ee6accc54fb0252355119587ce0b342ad33d43cbfd49a7002c9805ce51eb63db9157e858c8f29792b2848dc4fa4161bb1b2e4caf128312c2e0da35d3a36f1856b158b065f5263baba6761068ff18159c0b686e61f04287427751562d4d204662991d45480e39acc5fe23dfb338"], 0x14}}, 0x1) (async) 57.254323735s ago: executing program 2 (id=7011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000240)="2e75e0b9e390e734f036916719f4835029225682221570490f3fc539a84143c1bfbc890d0f7a418ff3c20db6d9dd20362c7d79a6f635257acf08cdb19de8f6d17205fd9b141a2d039fe5cc833d5541c7a0abd984c6f706e4f37e4033b4465f4b1247bcf33f6962cd088134e76f17b83583ad1715263658fefebd8a772e6cfc4ba8afe735", 0x84}], 0x1}, 0xffffffff}], 0x1, 0x20080058) 0s ago: executing program 33 (id=6983): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e}, 0x90) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='hsr0\x00') sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): e MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.906723][T28423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.025869][T28707] xt_cluster: node mask cannot exceed total number of nodes [ 898.106353][T28713] netlink: 'syz.0.6044': attribute type 1 has an invalid length. [ 898.181305][T28701] bond12: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 898.215674][T28701] bond12 (unregistering): Released all slaves [ 898.345466][T28423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.356118][T28423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.389038][T28423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.814361][T28714] bond9: (slave veth0_to_bond): Releasing backup interface [ 898.838083][T28714] bond13: (slave veth0_to_bond): making interface the new active one [ 898.858626][T28714] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 899.292591][T28423] hsr_slave_0: entered promiscuous mode [ 899.332706][T28423] hsr_slave_1: entered promiscuous mode [ 899.357424][T28423] debugfs: 'hsr0' already exists in 'hsr' [ 899.374450][T28423] Cannot create hsr debugfs directory [ 899.467316][T28732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6052'. [ 900.821837][T28423] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.140437][T28768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6063'. [ 901.334685][T28423] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.934853][T28423] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 902.007305][T28790] netlink: 'syz.3.6067': attribute type 1 has an invalid length. [ 902.408166][T28790] 8021q: adding VLAN 0 to HW filter on device bond6 [ 902.543303][T28794] bond6: (slave geneve3): making interface the new active one [ 902.555159][T28794] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 902.775080][T28423] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.735469][T28817] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6073'. [ 904.525957][T28834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6077'. [ 904.582090][T28423] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 904.664144][T28423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 904.709114][T28423] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 904.799128][T28423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 904.835203][T28423] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 904.884525][T28423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 904.917032][T28423] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 904.987810][T28423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 905.007241][T28838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6078'. [ 905.188586][T28838] 8021q: adding VLAN 0 to HW filter on device bond12 [ 905.259853][T28844] macvlan3: entered promiscuous mode [ 905.266345][T28844] macvlan3: entered allmulticast mode [ 905.277188][T28844] bond12: entered promiscuous mode [ 905.302451][T28844] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 905.322230][T28844] bond12: left promiscuous mode [ 906.008721][T28857] 8021q: VLANs not supported on sit0 [ 906.107033][T28423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.139511][T28858] bond0: Master is either lo or non-ether device [ 906.653977][T28423] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.707398][T28867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6085'. [ 906.815787][T21489] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.824017][T21489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.001366][T28872] bridge0: entered promiscuous mode [ 907.009884][T28872] bridge0: entered allmulticast mode [ 907.136140][T28877] x_tables: duplicate underflow at hook 1 [ 907.157052][ T9067] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.169271][ T9067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.736820][T28882] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6090'. [ 908.103915][T28887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6091'. [ 908.717050][T28901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6094'. [ 908.788481][T28901] netlink: 'syz.4.6094': attribute type 8 has an invalid length. [ 909.302179][T28912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6096'. [ 909.368442][T28912] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6096'. [ 909.406082][T28909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6097'. [ 909.447796][T28909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6097'. [ 909.863966][T28923] netlink: 'syz.0.6099': attribute type 8 has an invalid length. [ 909.898567][T28923] sch_fq: defrate 0 ignored. [ 909.957520][T28926] netlink: 'syz.0.6099': attribute type 11 has an invalid length. [ 910.072184][T28923] netlink: 'syz.0.6099': attribute type 23 has an invalid length. [ 910.361728][T28932] pimreg3: entered allmulticast mode [ 910.362553][T28934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6102'. [ 910.378175][T28934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6102'. [ 910.736082][T28941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6103'. [ 910.851452][T28945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6103'. [ 910.998652][T28423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.259101][T28953] gre0: left promiscuous mode [ 911.584162][T28953] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.592465][T28953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.636405][T28968] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6111'. [ 911.670220][T28968] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6111'. [ 911.693390][T28953] vlan0: left promiscuous mode [ 911.800348][T28953] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 911.809732][T28953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 911.876671][T28953] mac80211_hwsim hwsim43 wlan0: left promiscuous mode [ 911.920315][T28953] geneve2: left promiscuous mode [ 912.097130][T28953] bond1: left promiscuous mode [ 912.109232][T28953] vti0: left promiscuous mode [ 912.135046][T28953] veth0_to_team: entered promiscuous mode [ 912.168212][T28953] bridge2: left promiscuous mode [ 912.223669][T28953] bond0: entered promiscuous mode [ 912.246859][T28953] bond_slave_0: entered promiscuous mode [ 912.272841][T28953] bond_slave_1: entered promiscuous mode [ 912.296506][T28953] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 912.339727][T28953] bridge4: left promiscuous mode [ 912.468672][T28953] bond2: left promiscuous mode [ 912.478631][T28953] bridge7: left promiscuous mode [ 912.506620][T28953] 8021q: adding VLAN 0 to HW filter on device bond3 [ 912.519759][T28953] gretap1: left promiscuous mode [ 912.531190][T28953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 912.587326][ T9067] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.595721][ T9067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.628879][ T9067] bridge0: port 3(veth1_to_bridge) entered blocking state [ 912.637491][ T9067] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 912.920293][T28991] SET target dimension over the limit! [ 912.943519][T28993] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6118'. [ 913.051965][T28996] netlink: 'syz.3.6120': attribute type 3 has an invalid length. [ 913.065158][T28993] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.075843][T28993] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.489518][T28423] veth0_vlan: entered promiscuous mode [ 913.899925][T28423] veth1_vlan: entered promiscuous mode [ 913.983097][T29005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6122'. [ 914.272576][T28423] veth0_macvtap: entered promiscuous mode [ 914.402854][T28423] veth1_macvtap: entered promiscuous mode [ 914.730453][T29024] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 914.892630][T28423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.036251][T28423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.224309][ T9067] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.274353][ T9067] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.309219][ T9067] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.402256][ T9067] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.584803][T29038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6130'. [ 915.720411][T29040] nbd: must specify an index to disconnect [ 916.338102][T29058] netlink: 'syz.0.6135': attribute type 4 has an invalid length. [ 916.353618][ T9067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.399607][ T9067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.706166][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.734660][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.178062][T29078] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6139'. [ 917.337878][ T35] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 917.410233][ T35] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 917.474864][ T35] bond0: active interface up! [ 918.246887][T29086] wg2 speed is unknown, defaulting to 1000 [ 918.713500][T21178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 918.733085][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6143'. [ 918.735536][T21178] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 918.753698][T21178] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 918.764572][T21178] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 918.773343][T21178] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 920.425544][ T1009] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.474953][T29128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6147'. [ 920.659310][T29130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6149'. [ 920.787139][T29125] syzkaller1: entered promiscuous mode [ 920.809497][T29125] syzkaller1: entered allmulticast mode [ 920.882666][T21178] Bluetooth: hci3: command tx timeout [ 921.006041][T29138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6149'. [ 921.076291][T29086] wlan1 speed is unknown, defaulting to 1000 [ 921.379582][ T1009] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.667909][ T1009] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.979121][ T1009] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.207415][T29099] wg2 speed is unknown, defaulting to 1000 [ 922.961170][T21178] Bluetooth: hci3: command tx timeout [ 923.019331][ T608] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.089100][ T608] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.183248][T29173] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 923.753815][T29173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 923.837845][T21489] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.278647][ T1009] C: left allmulticast mode [ 924.522080][T29196] netlink: 'syz.3.6162': attribute type 1 has an invalid length. [ 924.551256][T29196] netlink: 'syz.3.6162': attribute type 2 has an invalid length. [ 924.613023][ T1009] bond0 (unregistering): (slave ip6gre1): Releasing backup interface [ 925.042001][T21178] Bluetooth: hci3: command tx timeout [ 925.186408][ T1009] bond8 (unregistering): (slave gretap2): Releasing active interface [ 925.371724][ T1009] team0: Port device geneve1 removed [ 925.543337][ T1009] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 925.652326][ T1009] bond0 (unregistering): Released all slaves [ 925.706166][ T1009] bond1 (unregistering): Released all slaves [ 925.751125][ T1009] bond2 (unregistering): Released all slaves [ 925.779230][ T1009] bond3 (unregistering): Released all slaves [ 925.833340][ T1009] bond4 (unregistering): Released all slaves [ 925.972906][ T1009] bond5 (unregistering): Released all slaves [ 926.010189][ T1009] bond6 (unregistering): Released all slaves [ 926.037320][ T1009] bond7 (unregistering): Released all slaves [ 926.096175][ T1009] bond8 (unregistering): Released all slaves [ 926.143823][ T1009] bond9 (unregistering): Released all slaves [ 926.195148][ T1009] bond10 (unregistering): Released all slaves [ 926.221681][ T1009] bond11 (unregistering): Released all slaves [ 926.264477][ T1009] bond12 (unregistering): Released all slaves [ 926.313337][T21489] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.363871][T29190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 926.576242][T29099] wlan1 speed is unknown, defaulting to 1000 [ 927.005061][ T1009] IPVS: stopping backup sync thread 17768 ... [ 927.139154][T21178] Bluetooth: hci3: command tx timeout [ 929.264875][ T35] smc: removing ib device syz1 [ 929.295548][T29243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6171'. [ 929.344278][T29243] openvswitch: netlink: Flow key attr not present in new flow. [ 929.426291][T27696] wlan1 speed is unknown, defaulting to 1000 [ 929.565686][T29246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6171'. [ 929.953784][ T35] smbdirect: ib_dev[syz1] removed [ 930.121087][T29254] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6172'. [ 930.915542][T29273] netlink: 'syz.0.6175': attribute type 7 has an invalid length. [ 930.978036][T29273] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6175'. [ 931.386269][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 934.293279][T21121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 934.328468][T21121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 934.341281][T21121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 934.365395][T21121] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 934.381101][T21121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 935.926708][T29334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6188'. [ 936.298708][T29350] netlink: 'syz.0.6192': attribute type 1 has an invalid length. [ 936.561315][T21121] Bluetooth: hci5: command tx timeout [ 936.737837][T29359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6192'. [ 937.388768][T29350] 8021q: adding VLAN 0 to HW filter on device bond14 [ 937.405404][T29352] bond14: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 937.428552][T29352] bond14: entered allmulticast mode [ 937.521254][T29355] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link [ 937.543810][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 937.713666][T29367] netlink: 'syz.3.6195': attribute type 12 has an invalid length. [ 937.755775][T29367] netlink: 'syz.3.6195': attribute type 29 has an invalid length. [ 937.786116][T29367] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6195'. [ 937.810070][T29367] netlink: 59 bytes leftover after parsing attributes in process `syz.3.6195'. [ 938.069743][T29099] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.082774][T29099] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.093294][T29099] bridge_slave_0: entered allmulticast mode [ 938.139335][T29099] bridge_slave_0: entered promiscuous mode [ 938.214471][T29099] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.246882][T29099] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.281846][T29099] bridge_slave_1: entered allmulticast mode [ 938.309466][T29380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6198'. [ 938.358853][T29099] bridge_slave_1: entered promiscuous mode [ 938.456342][T29381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 938.643646][T21121] Bluetooth: hci5: command tx timeout [ 938.988585][T29099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.128893][T29099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.913631][T29099] team0: Port device team_slave_0 added [ 940.059110][T29099] team0: Port device team_slave_1 added [ 940.102282][T29412] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6204'. [ 940.133801][T29412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6204'. [ 940.721410][T21121] Bluetooth: hci5: command tx timeout [ 940.996989][T29099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.037624][T29099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.116631][T29099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.174927][T29309] wg2 speed is unknown, defaulting to 1000 [ 941.194003][T29428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6207'. [ 941.255774][T29099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.359578][T29099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.554389][T29099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.556075][T29451] netlink: 'syz.0.6211': attribute type 32 has an invalid length. [ 942.723323][T29099] hsr_slave_0: entered promiscuous mode [ 942.806561][T21121] Bluetooth: hci5: command tx timeout [ 942.831432][T29099] hsr_slave_1: entered promiscuous mode [ 942.880449][T29099] debugfs: 'hsr0' already exists in 'hsr' [ 942.938781][T29099] Cannot create hsr debugfs directory [ 943.867950][T29466] netlink: 'syz.2.6213': attribute type 11 has an invalid length. [ 944.334719][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 944.975505][T29480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6217'. [ 944.987392][T29480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6217'. [ 945.626502][T29492] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 946.072021][T29494] pimreg: entered allmulticast mode [ 947.651975][ T1009] batman_adv: batadv0: Removing interface: wlan0 [ 948.496300][T29532] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6229'. [ 948.507561][T29099] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.154266][T29540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6231'. [ 949.164534][T29540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6231'. [ 949.254640][T29540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6231'. [ 949.655998][T29099] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.019966][T29540] 8021q: adding VLAN 0 to HW filter on device bond12 [ 950.396549][T29099] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.732204][T29566] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6237'. [ 951.086365][T29099] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.266693][T29571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6238'. [ 952.888562][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.935356][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.055031][ T1009] v: left promiscuous mode [ 954.149384][T29615] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6247'. [ 954.834412][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 955.482098][T29620] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6248'. [ 955.514112][T29620] tipc: Invalid UDP bearer configuration [ 955.514279][T29620] tipc: Enabling of bearer rejected, failed to enable media [ 955.561664][T29623] netlink: 'syz.2.6249': attribute type 11 has an invalid length. [ 955.593835][T29623] netlink: 'syz.2.6249': attribute type 4 has an invalid length. [ 955.634477][T29623] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6249'. [ 956.062014][T29639] netlink: 'syz.2.6250': attribute type 33 has an invalid length. [ 956.215367][T29639] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 956.227463][T29648] netlink: 'syz.0.6252': attribute type 178 has an invalid length. [ 956.785319][T29099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 956.839230][T29099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 956.925044][T29668] IPv6: NLM_F_CREATE should be specified when creating new route [ 956.954664][T29309] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.995794][T29309] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.037048][T29309] bridge_slave_0: entered allmulticast mode [ 957.097742][T29309] bridge_slave_0: entered promiscuous mode [ 957.173801][T29099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 957.359670][T29099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 957.409441][T29309] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.438731][T29309] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.466882][T29309] bridge_slave_1: entered allmulticast mode [ 957.490322][T29309] bridge_slave_1: entered promiscuous mode [ 957.543733][T29672] syzkaller0: entered promiscuous mode [ 957.565584][T29672] syzkaller0: entered allmulticast mode [ 957.584658][T29099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 957.663851][T29099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 957.708191][T29099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 957.823671][T29099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 958.072976][ T1009] IPVS: stop unused estimator thread 0... [ 958.279525][T29309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.370413][T29309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.884465][T29309] team0: Port device team_slave_0 added [ 958.927980][T29309] team0: Port device team_slave_1 added [ 959.042521][T29708] netlink: 'syz.3.6261': attribute type 2 has an invalid length. [ 959.082920][T29708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6261'. [ 959.405463][T29309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.427544][T29309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.533789][T29309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.549518][T29309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.558521][T29309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.592103][T29309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.752678][T29718] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6262'. [ 960.206341][T29721] netlink: 'syz.0.6264': attribute type 1 has an invalid length. [ 960.219273][T29309] hsr_slave_0: entered promiscuous mode [ 960.257693][T29309] hsr_slave_1: entered promiscuous mode [ 960.291993][T29309] debugfs: 'hsr0' already exists in 'hsr' [ 960.312804][T29309] Cannot create hsr debugfs directory [ 960.399839][T29727] netlink: 'syz.3.6265': attribute type 6 has an invalid length. [ 961.145261][T29737] netlink: 'syz.0.6267': attribute type 1 has an invalid length. [ 962.225166][ T9069] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.743903][ T9069] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.914426][T29774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6274'. [ 962.926942][T29099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.948930][T29770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6273'. [ 962.984879][T29770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6273'. [ 963.260377][T29774] 8021q: adding VLAN 0 to HW filter on device bond7 [ 963.405467][T29777] macvlan5: entered promiscuous mode [ 963.436374][T29777] macvlan5: entered allmulticast mode [ 963.457472][T29777] bond7: entered promiscuous mode [ 963.467280][T29777] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 963.494928][T29777] bond7: left promiscuous mode [ 964.120458][ T9069] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.266245][T29792] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 964.606264][ T9069] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.088334][T29309] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 965.215435][T29309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 965.255113][T29099] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.342671][T29309] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 965.393277][T29818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6282'. [ 965.448318][T29309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 965.499018][T29309] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 965.601037][T29309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 965.614543][T29309] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 965.684458][T29309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 965.786504][T29818] vlan0: entered promiscuous mode [ 965.839556][T29818] syz_tun: entered promiscuous mode [ 966.143589][ T1009] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.303031][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.311306][ T608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.433396][T29830] tipc: Enabling of bearer rejected, failed to enable media [ 966.536061][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.544271][ T608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.785198][T21490] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.975027][T29850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6287'. [ 967.079396][ T1009] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.596854][ T1009] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.631031][ T9069] bridge_slave_1: left allmulticast mode [ 967.637844][ T9069] bridge_slave_1: left promiscuous mode [ 967.649287][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.677340][ T9069] bridge_slave_0: left allmulticast mode [ 967.685005][ T9069] bridge_slave_0: left promiscuous mode [ 967.692343][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.237422][ T9069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.266692][ T9069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.279082][ T9069] bond0 (unregistering): Released all slaves [ 968.359559][T29869] IPv6: sit1: Disabled Multicast RS [ 969.966543][T29905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 970.434216][T29309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.725045][T29309] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.849531][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.857898][ T608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.312568][T21490] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.320888][T21490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.133361][ T9069] hsr_slave_0: left promiscuous mode [ 972.173728][ T9069] hsr_slave_1: left promiscuous mode [ 972.232619][ T9069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.288918][ T9069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.334306][ T9069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.370047][ T9069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.554805][ T9069] veth1_macvtap: left promiscuous mode [ 972.562331][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 972.593374][ T9069] veth0_macvtap: left promiscuous mode [ 972.639874][ T9069] veth1_vlan: left promiscuous mode [ 972.664480][ T9069] veth0_vlan: left promiscuous mode [ 974.472906][ T9069] team0 (unregistering): Port device team_slave_1 removed [ 974.530446][ T9069] team0 (unregistering): Port device team_slave_0 removed [ 975.147787][T29956] macvlan0: entered promiscuous mode [ 975.726776][T29977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6307'. [ 975.757806][T29977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6307'. [ 975.840157][T29977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6307'. [ 975.861116][T29977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6307'. [ 976.477443][T29988] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6309'. [ 976.547086][T29988] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6309'. [ 979.024557][T30028] tunl0: left promiscuous mode [ 979.224935][T21178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 979.239803][T21178] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 979.255880][T21178] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 979.268895][T21178] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 979.279194][T21178] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 980.179748][T30028] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 980.200457][T30031] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 980.205417][T30030] netlink: 'syz.2.6317': attribute type 3 has an invalid length. [ 980.795197][T30058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6322'. [ 980.864855][T30058] netlink: 'syz.0.6322': attribute type 10 has an invalid length. [ 980.915777][T30058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6322'. [ 981.363691][T21121] Bluetooth: hci4: command tx timeout [ 981.881051][T29309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.443905][T21121] Bluetooth: hci4: command tx timeout [ 983.886277][T30034] wg2 speed is unknown, defaulting to 1000 [ 984.266111][T30120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6330'. [ 984.478318][ T76] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.640500][T30123] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6331'. [ 984.705512][ T76] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.875280][ T1009] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.086020][ T76] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.208511][ T9067] bridge_slave_1: left allmulticast mode [ 985.244599][ T9067] bridge_slave_1: left promiscuous mode [ 985.286366][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.421981][ T9067] bridge_slave_0: left allmulticast mode [ 985.458941][ T9067] bridge_slave_0: left promiscuous mode [ 985.500621][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.531908][T21121] Bluetooth: hci4: command tx timeout [ 985.727781][T30140] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6333'. [ 986.931962][ T9067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.957099][ T9067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.969416][ T9067] bond0 (unregistering): Released all slaves [ 987.106986][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 987.601042][T21121] Bluetooth: hci4: command tx timeout [ 988.419638][T29309] veth0_vlan: entered promiscuous mode [ 988.808914][T30177] lo: entered allmulticast mode [ 988.866445][T30177] tunl0: entered allmulticast mode [ 988.937793][T30177] gre0: entered allmulticast mode [ 989.049983][T30177] erspan0: entered allmulticast mode [ 989.092725][T30177] ip_vti0: entered allmulticast mode [ 989.119126][T30177] ip6_vti0: entered allmulticast mode [ 989.130431][T30177] sit0: entered allmulticast mode [ 989.162097][T30177] ip6tnl0: entered allmulticast mode [ 989.183855][T30177] ip6gre0: entered allmulticast mode [ 989.207315][T30177] syz_tun: entered allmulticast mode [ 989.357720][ T9067] hsr_slave_0: left promiscuous mode [ 989.385374][ T9067] hsr_slave_1: left promiscuous mode [ 989.400262][ T9067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.424276][ T9067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.865067][ T9067] team0 (unregistering): Port device team_slave_1 removed [ 990.936170][ T9067] team0 (unregistering): Port device team_slave_0 removed [ 991.687044][T29309] veth1_vlan: entered promiscuous mode [ 992.469466][T30235] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6351'. [ 992.624859][T30237] sctp: [Deprecated]: syz.2.6352 (pid 30237) Use of int in max_burst socket option. [ 992.624859][T30237] Use struct sctp_assoc_value instead [ 992.848825][T29309] veth0_macvtap: entered promiscuous mode [ 992.934849][T29309] veth1_macvtap: entered promiscuous mode [ 993.136408][T30230] can: request_module (can-proto-0) failed. [ 994.213263][T30034] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.224143][T30034] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.232893][T30034] bridge_slave_0: entered allmulticast mode [ 994.246495][T30034] bridge_slave_0: entered promiscuous mode [ 994.259222][T30034] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.278738][T21178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 994.295129][T30034] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.303738][T21178] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 994.313846][T30034] bridge_slave_1: entered allmulticast mode [ 994.327959][T30034] bridge_slave_1: entered promiscuous mode [ 994.341715][T21178] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 994.360529][T21178] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 994.405066][T21178] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 994.704474][T30034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.852788][T30034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.318861][T30034] team0: Port device team_slave_0 added [ 995.400324][T30034] team0: Port device team_slave_1 added [ 995.561651][T30285] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6361'. [ 995.756356][T30034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.818000][T30034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.960505][T30034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.058845][T30034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.106430][T30034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.249037][T30299] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 996.262412][T30034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.483898][T21121] Bluetooth: hci3: command tx timeout [ 996.750219][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 997.028357][T30034] hsr_slave_0: entered promiscuous mode [ 997.075768][T30034] hsr_slave_1: entered promiscuous mode [ 997.128890][T30034] debugfs: 'hsr0' already exists in 'hsr' [ 997.153402][T30034] Cannot create hsr debugfs directory [ 997.793278][T30322] geneve4: entered promiscuous mode [ 998.486537][T30335] bridge0: entered promiscuous mode [ 998.505119][T30335] bridge0: entered allmulticast mode [ 998.562554][T21121] Bluetooth: hci3: command tx timeout [ 998.915524][T30260] wg2 speed is unknown, defaulting to 1000 [ 999.488461][T30356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6376'. [ 1000.641267][T21121] Bluetooth: hci3: command tx timeout [ 1001.061656][T30378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6381'. [ 1001.272688][T30034] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.501252][ T76] netdevsim netdevsim5 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.627547][ T76] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.803895][T30034] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.259852][ T608] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.356948][T30396] netlink: 'syz.2.6385': attribute type 1 has an invalid length. [ 1002.385919][T30034] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.451876][T30397] netlink: 'syz.0.6384': attribute type 6 has an invalid length. [ 1002.503620][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1002.517290][ T1009] netdevsim netdevsim5 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.640199][T21485] bridge_slave_1: left allmulticast mode [ 1002.654261][T21485] bridge_slave_1: left promiscuous mode [ 1002.662050][T21485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.680412][T21485] bridge_slave_0: left allmulticast mode [ 1002.686209][T21485] bridge_slave_0: left promiscuous mode [ 1002.697420][T21485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.726817][T30408] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6386'. [ 1002.742459][T21178] Bluetooth: hci3: command tx timeout [ 1003.205302][T21485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1003.218584][T21485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1003.236899][T21485] bond0 (unregistering): Released all slaves [ 1003.338690][T30399] bond13: (slave gretap1): making interface the new active one [ 1003.349916][T30399] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 1003.548968][T30034] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.146045][T30420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6389'. [ 1004.176974][T30421] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1004.827108][T30432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6393'. [ 1005.618252][T21485] hsr_slave_0: left promiscuous mode [ 1005.643708][T21485] hsr_slave_1: left promiscuous mode [ 1005.668912][T21485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.724686][T21485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.902814][T21485] veth1_macvtap: left promiscuous mode [ 1005.908496][T21485] veth0_macvtap: left promiscuous mode [ 1005.941814][T21485] veth1_vlan: left promiscuous mode [ 1005.959051][T21485] veth0_vlan: left promiscuous mode [ 1006.698906][T30466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6399'. [ 1007.719370][T21485] team0 (unregistering): Port device team_slave_1 removed [ 1007.773955][T21485] team0 (unregistering): Port device team_slave_0 removed [ 1008.703980][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1009.074785][T30485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6403'. [ 1009.252267][T30489] netlink: 'syz.3.6405': attribute type 9 has an invalid length. [ 1009.455011][T30496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6406'. [ 1009.550302][T30464] block nbd5: Receive control failed (result -107) [ 1009.867621][T30034] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1009.917848][T30034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1009.970302][T30034] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1010.043085][T30034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1010.063435][T30034] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1010.122606][T30034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1010.261944][T30034] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1010.297006][T30507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1010.310555][T30034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1010.337808][T30260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.380213][T30260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.402397][T30260] bridge_slave_0: entered allmulticast mode [ 1010.445285][T30260] bridge_slave_0: entered promiscuous mode [ 1010.569117][T30507] hsr_slave_1 (unregistering): left promiscuous mode [ 1010.629617][T30260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.669360][T30260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.700615][T30260] bridge_slave_1: entered allmulticast mode [ 1010.724313][T30260] bridge_slave_1: entered promiscuous mode [ 1011.134575][T30260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.205661][T30260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.502677][T30260] team0: Port device team_slave_0 added [ 1011.574731][T30260] team0: Port device team_slave_1 added [ 1011.917929][T30260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.955607][T30543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6417'. [ 1011.974969][T30260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.088805][T30260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.143183][T30260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.151301][T30260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.198345][T30260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.616237][T30260] hsr_slave_0: entered promiscuous mode [ 1012.637668][T30260] hsr_slave_1: entered promiscuous mode [ 1012.656785][T30557] netlink: 'syz.0.6420': attribute type 8 has an invalid length. [ 1012.691203][T30260] debugfs: 'hsr0' already exists in 'hsr' [ 1012.715357][T30260] Cannot create hsr debugfs directory [ 1013.712489][T30575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6424'. [ 1014.220051][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1014.583023][T30587] netlink: 'syz.2.6426': attribute type 2 has an invalid length. [ 1014.627171][T30260] netdevsim netdevsim5 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.702629][T30591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6426'. [ 1014.852352][T30034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.962387][T24891] hid-generic 0005:0002:0000.0004: item fetching failed at offset 0/1 [ 1014.973834][T24891] hid-generic 0005:0002:0000.0004: probe with driver hid-generic failed with error -22 [ 1015.495805][T30260] netdevsim netdevsim5 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.722895][T30260] netdevsim netdevsim5 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.971933][T30034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.050458][T30260] netdevsim netdevsim5 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.185734][T30619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6432'. [ 1016.203011][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.211777][ T9065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.252480][T30615] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6430'. [ 1016.980013][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.988273][ T9065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.523784][T30637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6435'. [ 1017.669083][T30573] block nbd7: Receive control failed (result -107) [ 1017.678158][T30646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6437'. [ 1018.128630][T30260] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1018.156019][T30260] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1018.207675][T30260] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1018.310008][T30260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1018.383864][T30260] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1018.444395][T30260] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1018.574065][T30260] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1018.666100][T30260] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1018.738455][T30665] syzkaller0: entered promiscuous mode [ 1018.791353][T30665] syzkaller0: entered allmulticast mode [ 1018.815596][T30661] xt_cgroup: path and classid specified [ 1019.758161][T30690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6444'. [ 1019.794932][T30694] netlink: 'syz.0.6445': attribute type 11 has an invalid length. [ 1019.854251][T30694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6445'. [ 1019.944518][T30260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.023361][T30694] xt_policy: output policy not valid in PREROUTING and INPUT [ 1020.109060][T30260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.218836][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.227107][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.426122][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.434388][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.602399][T30705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6446'. [ 1020.773384][T30573] block nbd8: Receive control failed (result -107) [ 1020.951686][T30260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1022.432968][T30034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.091564][T30745] netlink: 'syz.3.6453': attribute type 1 has an invalid length. [ 1023.480137][T30745] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1024.191779][T30769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6456'. [ 1024.258892][T30769] netlink: 'syz.3.6456': attribute type 18 has an invalid length. [ 1024.314172][T30769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6456'. [ 1025.230367][T30260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.241308][T30785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6457'. [ 1025.425403][T30573] block nbd9: Receive control failed (result -107) [ 1025.814104][T30034] veth0_vlan: entered promiscuous mode [ 1025.903195][T30034] veth1_vlan: entered promiscuous mode [ 1026.229641][T30034] veth0_macvtap: entered promiscuous mode [ 1026.272604][T30797] netlink: 'syz.3.6461': attribute type 4 has an invalid length. [ 1026.299089][T30034] veth1_macvtap: entered promiscuous mode [ 1026.628150][T30034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.826534][T30034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.069395][T21485] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.085015][T30808] wg2 speed is unknown, defaulting to 1000 [ 1027.094004][T21490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.126567][T21490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.163825][T21490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.572559][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.610448][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.943082][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.012781][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.073266][T30260] veth0_vlan: entered promiscuous mode [ 1029.277746][T30260] veth1_vlan: entered promiscuous mode [ 1029.818774][T30842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6141'. [ 1030.570518][T30260] veth0_macvtap: entered promiscuous mode [ 1030.648209][T30260] veth1_macvtap: entered promiscuous mode [ 1030.965428][T30260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.112166][T30260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.240421][ T1009] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.288657][ T1009] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.355605][ T1009] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.406977][ T1009] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.909559][T30871] rdma_rxe: rxe_newlink: failed to add wg2 [ 1032.587350][ T9065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.636086][ T9065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.805632][T30885] netlink: 'syz.3.6482': attribute type 9 has an invalid length. [ 1032.991456][T30888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6483'. [ 1033.274845][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.289041][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.441579][T30946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1036.475640][T30946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1036.508071][T30946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1036.547360][T30946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1036.568332][T30946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1037.270403][T30958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6497'. [ 1037.344292][T30958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6497'. [ 1038.021202][T30976] netlink: 13 bytes leftover after parsing attributes in process `syz.2.6502'. [ 1038.205601][T30970] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 1038.235750][T30970] bond9 (unregistering): Released all slaves [ 1038.641690][T30946] Bluetooth: hci5: command tx timeout [ 1038.778925][T30978] geneve2: entered promiscuous mode [ 1038.795967][T30978] geneve2: entered allmulticast mode [ 1038.826904][T30984] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6503'. [ 1038.847209][ T12] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1038.899388][T30984] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6503'. [ 1038.911119][ T12] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1038.966395][ T12] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1039.036258][ T12] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1040.720923][T30946] Bluetooth: hci5: command tx timeout [ 1040.752531][T31004] syzkaller0: entered promiscuous mode [ 1040.760590][T31004] syzkaller0: entered allmulticast mode [ 1042.814878][T30946] Bluetooth: hci5: command tx timeout [ 1044.897868][T30946] Bluetooth: hci5: command tx timeout [ 1047.026943][T30945] wg2 speed is unknown, defaulting to 1000 [ 1048.214524][T31054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6521'. [ 1048.318299][T31054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6521'. [ 1048.354581][T31051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6520'. [ 1048.762006][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.937183][T31051] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1049.024738][T31051] bond1 (unregistering): Released all slaves [ 1049.268702][T30946] Bluetooth: hci3: link tx timeout [ 1049.277886][T30946] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1049.331912][T30946] Bluetooth: hci3: link tx timeout [ 1049.338313][T30946] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1049.528592][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.815981][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.862022][T30946] Bluetooth: hci3: link tx timeout [ 1049.867995][T30946] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1050.028354][T31074] syzkaller0: entered promiscuous mode [ 1050.051395][T31074] syzkaller0: entered allmulticast mode [ 1050.472505][T30946] Bluetooth: hci3: link tx timeout [ 1050.478642][T30946] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1050.648303][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.881402][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.039243][T30946] Bluetooth: hci3: link tx timeout [ 1051.045457][T30946] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1051.289362][T24882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.374667][T30946] Bluetooth: hci3: command 0x0406 tx timeout [ 1051.868730][T31078] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.6526'. [ 1051.914829][T31078] netlink: 'syz.5.6526': attribute type 12 has an invalid length. [ 1051.937867][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.002166][T31110] netlink: 'syz.2.6532': attribute type 1 has an invalid length. [ 1052.345286][T31110] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1052.512704][T31124] netlink: 'syz.3.6535': attribute type 1 has an invalid length. [ 1052.679557][T30945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.700407][T30945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.734155][T30945] bridge_slave_0: entered allmulticast mode [ 1052.810042][T30945] bridge_slave_0: entered promiscuous mode [ 1052.868446][T30945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.912784][T30945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.968288][T30945] bridge_slave_1: entered allmulticast mode [ 1053.004991][T27695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.028321][T30945] bridge_slave_1: entered promiscuous mode [ 1053.165686][T31133] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1053.362868][T30945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.515797][T30945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.685699][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.819729][T31143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6540'. [ 1053.940679][T30945] team0: Port device team_slave_0 added [ 1054.053233][T30945] team0: Port device team_slave_1 added [ 1054.081552][T27695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.456137][T30945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.484507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.509343][T30945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.519021][T31161] openvswitch: netlink: VXLAN extension 61 out of range max 1 [ 1054.597755][T30945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.687846][T30945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.707194][T30945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.831176][T30945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.178647][T27695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.525838][T31179] sctp: [Deprecated]: syz.3.6550 (pid 31179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1055.525838][T31179] Use struct sctp_sack_info instead [ 1055.599053][T30945] hsr_slave_0: entered promiscuous mode [ 1055.641127][T30945] hsr_slave_1: entered promiscuous mode [ 1055.660327][T30945] debugfs: 'hsr0' already exists in 'hsr' [ 1055.706993][T30945] Cannot create hsr debugfs directory [ 1055.764425][T24882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.790063][T31181] netlink: 'syz.3.6550': attribute type 21 has an invalid length. [ 1055.838822][T31181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6550'. [ 1056.136060][T31181] netlink: 'syz.3.6550': attribute type 21 has an invalid length. [ 1056.152606][T31181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6550'. [ 1056.318170][T27695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.344159][T31198] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6553'. [ 1056.460178][T31200] netlink: 45 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1056.599975][T31200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1056.662179][T31201] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1056.724818][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.043923][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.419360][T27695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.399317][T31234] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1058.473933][T31238] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:2 [ 1058.529962][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.579908][T31243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6562'. [ 1058.722936][T30945] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.778891][T30945] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.638101][T27694] net_ratelimit: 1 callbacks suppressed [ 1059.638148][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.654929][T31258] FAULT_INJECTION: forcing a failure. [ 1059.654929][T31258] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.670097][T30945] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.670237][T30945] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.694366][T31258] CPU: 0 UID: 0 PID: 31258 Comm: syz.5.6569 Not tainted syzkaller #0 PREEMPT(full) [ 1059.694394][T31258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1059.694409][T31258] Call Trace: [ 1059.694418][T31258] [ 1059.694427][T31258] dump_stack_lvl+0xe8/0x150 [ 1059.694466][T31258] should_fail_ex+0x40c/0x560 [ 1059.694499][T31258] should_failslab+0xa8/0x100 [ 1059.694533][T31258] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1059.694561][T31258] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 1059.694585][T31258] ? __inet_hash_connect+0x1631/0x25a0 [ 1059.694611][T31258] ? __inet_hash_connect+0x1631/0x25a0 [ 1059.694645][T31258] __inet_hash_connect+0x1631/0x25a0 [ 1059.694698][T31258] ? __inet_hash_connect+0x5ce/0x25a0 [ 1059.694733][T31258] ? __pfx___inet_hash_connect+0x10/0x10 [ 1059.694760][T31258] ? sk_setup_caps+0x94f/0xbc0 [ 1059.694779][T31258] ? inet6_ehashfn+0x2f/0x3b0 [ 1059.694818][T31258] ? inet6_hash_connect+0xeb/0x170 [ 1059.694845][T31258] tcp_v6_connect+0x1231/0x1cf0 [ 1059.694865][T31258] ? sock_sendmsg_nosec+0x90/0x180 [ 1059.694890][T31258] ? ____sys_sendmsg+0x54e/0x850 [ 1059.694928][T31258] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1059.694966][T31258] __inet_stream_connect+0x258/0xe00 [ 1059.695008][T31258] ? rcu_is_watching+0x15/0xb0 [ 1059.695042][T31258] ? __pfx___inet_stream_connect+0x10/0x10 [ 1059.695092][T31258] ? __kasan_kmalloc+0x93/0xb0 [ 1059.695123][T31258] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1059.695150][T31258] ? __kmalloc_cache_noprof+0x150/0x660 [ 1059.695177][T31258] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1059.695219][T31258] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1059.695260][T31258] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 1059.695285][T31258] ? tcp_sendmsg_locked+0x631/0x55c0 [ 1059.695312][T31258] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1059.695346][T31258] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1059.695376][T31258] ? current_check_access_socket+0x26a/0xdf0 [ 1059.695405][T31258] ? __lock_acquire+0x683/0x2cf0 [ 1059.695487][T31258] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1059.695518][T31258] ? tcp_sendmsg+0x21/0x50 [ 1059.695543][T31258] ? __local_bh_enable_ip+0xd0/0x130 [ 1059.695574][T31258] tcp_sendmsg+0x2f/0x50 [ 1059.695596][T31258] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1059.695617][T31258] sock_sendmsg_nosec+0x90/0x180 [ 1059.695647][T31258] ____sys_sendmsg+0x54e/0x850 [ 1059.695676][T31258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1059.695709][T31258] ? import_iovec+0x73/0xa0 [ 1059.695745][T31258] ___sys_sendmsg+0x2a5/0x360 [ 1059.695764][T31258] ? __lock_acquire+0x683/0x2cf0 [ 1059.695798][T31258] ? __pfx____sys_sendmsg+0x10/0x10 [ 1059.695827][T31258] ? kstrtouint+0x6e/0xe0 [ 1059.695881][T31258] ? __fget_files+0x2a/0x420 [ 1059.695910][T31258] ? __fget_files+0x3a2/0x420 [ 1059.695950][T31258] __sys_sendmmsg+0x273/0x4d0 [ 1059.695979][T31258] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1059.696013][T31258] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1059.696052][T31258] ? ksys_write+0x242/0x270 [ 1059.696096][T31258] ? __pfx_ksys_write+0x10/0x10 [ 1059.696137][T31258] __x64_sys_sendmmsg+0xa0/0xc0 [ 1059.696160][T31258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.696184][T31258] do_syscall_64+0x174/0x580 [ 1059.696205][T31258] ? trace_irq_disable+0x3b/0x140 [ 1059.696233][T31258] ? clear_bhb_loop+0x40/0x90 [ 1059.696260][T31258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.696283][T31258] RIP: 0033:0x7fa555d9de99 [ 1059.696305][T31258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.696324][T31258] RSP: 002b:00007fa556cfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1059.696349][T31258] RAX: ffffffffffffffda RBX: 00007fa556025fa0 RCX: 00007fa555d9de99 [ 1059.696365][T31258] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 1059.696380][T31258] RBP: 00007fa556cfb090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.696393][T31258] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 1059.696407][T31258] R13: 00007fa556026038 R14: 00007fa556025fa0 R15: 00007ffd532fdfb8 [ 1059.696443][T31258] [ 1060.135224][T27697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.305867][T31264] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6570'. [ 1060.753145][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.778289][T31284] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1060.791818][T31284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6578'. [ 1060.884011][T30945] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.893835][T30945] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.052686][T31292] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6580'. [ 1061.065844][T31292] netlink: 'syz.5.6580': attribute type 9 has an invalid length. [ 1061.113044][T31293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6580'. [ 1061.122065][T31293] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1061.521206][T30945] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.531029][T30945] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.771838][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.831805][T31314] syzkaller0: entered promiscuous mode [ 1061.849770][T31314] syzkaller0: entered allmulticast mode [ 1061.869920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.879227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.433696][T30945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1062.464661][T30945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1062.473828][T31337] syzkaller0: entered promiscuous mode [ 1062.479347][T31337] syzkaller0: entered allmulticast mode [ 1062.527221][T30945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1062.587834][T30945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1062.596131][T31344] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6592'. [ 1062.653989][T30945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1062.701897][T30945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1062.881267][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.912871][T31352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6596'. [ 1062.972560][T30945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1063.045518][T30945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1063.304710][T27697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.648979][T30945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.669000][T30945] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.777501][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.785926][ T608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.885794][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.894320][ T608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.970008][T27695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.983253][T31400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6599'. [ 1064.027505][T31398] dvmrp0: entered allmulticast mode [ 1064.264958][T31411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6606'. [ 1064.389177][T31411] bond15: (slave bridge9): Enslaving as an active interface with an up link [ 1064.441804][T31411] macvlan3: entered promiscuous mode [ 1064.447176][T31411] macvlan3: entered allmulticast mode [ 1064.453133][T31411] bond15: (slave macvlan3): Error -98 calling set_mac_address [ 1064.480885][T31401] netlink: 'syz.5.6604': attribute type 1 has an invalid length. [ 1064.524078][T31401] netlink: 'syz.5.6604': attribute type 2 has an invalid length. [ 1065.053099][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.494417][T31451] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1065.955750][T31463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6616'. [ 1066.060347][T31474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6616'. [ 1066.150688][T31475] netlink: 'syz.2.6618': attribute type 13 has an invalid length. [ 1066.167172][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.267905][T31475] netlink: 'syz.2.6618': attribute type 27 has an invalid length. [ 1066.396380][T27697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.614511][T31494] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6622'. [ 1066.929284][T30945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.187405][T31514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6625'. [ 1067.255891][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.360007][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.417698][T31516] syzkaller0: entered promiscuous mode [ 1067.423285][T31516] syzkaller0: entered allmulticast mode [ 1067.487466][T30945] veth0_vlan: entered promiscuous mode [ 1067.560483][T30945] veth1_vlan: entered promiscuous mode [ 1067.776463][T30945] veth0_macvtap: entered promiscuous mode [ 1067.841611][T30945] veth1_macvtap: entered promiscuous mode [ 1067.939489][T31533] netlink: 'syz.3.6629': attribute type 10 has an invalid length. [ 1068.158139][T30945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.185159][T30945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.286117][T27695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.416046][ T9067] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.429807][ T9067] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.548022][ T608] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.564355][ T608] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.626750][T27697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.658722][T31557] 8021q: VLANs not supported on ip6_vti0 [ 1068.862340][T31560] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1068.950046][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.957958][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.076745][T21490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.084640][T21490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.299211][T31584] netlink: 'syz.5.6639': attribute type 7 has an invalid length. [ 1069.342916][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.378084][T31571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1069.389022][T31584] netlink: 'syz.5.6639': attribute type 7 has an invalid length. [ 1069.411713][ T1009] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.421547][ T1009] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.431369][ T1009] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.441919][ T1009] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1070.003217][T31602] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6644'. [ 1070.153945][T31601] syzkaller0: entered promiscuous mode [ 1070.216936][T31601] syzkaller0: entered allmulticast mode [ 1070.325292][T31604] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1070.436747][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.550801][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.893397][T30946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1070.916766][T30946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1070.927594][T30946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1070.945782][T30946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1070.987896][T30946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1071.500820][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.795676][T18043] syz_tun (unregistering): left promiscuous mode [ 1072.136381][T31655] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6652'. [ 1072.464518][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.488118][T27700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.547848][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.605065][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.709215][T31678] netlink: 'syz.0.6659': attribute type 13 has an invalid length. [ 1072.723060][T31676] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6657'. [ 1072.793564][T31680] netlink: 'syz.0.6659': attribute type 18 has an invalid length. [ 1072.822201][T31680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6659'. [ 1073.053285][T30573] Bluetooth: hci2: command tx timeout [ 1073.264382][T31620] wg2 speed is unknown, defaulting to 1000 [ 1073.656203][T31710] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6667'. [ 1073.678552][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.692075][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.733083][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.848937][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6668'. [ 1074.080751][T31719] netlink: 'syz.0.6670': attribute type 12 has an invalid length. [ 1074.088666][T31719] netlink: 'syz.0.6670': attribute type 29 has an invalid length. [ 1074.096513][T31719] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6670'. [ 1074.105584][T31719] netlink: 'syz.0.6670': attribute type 1 has an invalid length. [ 1074.113841][T31719] netlink: 'syz.0.6670': attribute type 2 has an invalid length. [ 1074.138849][T31719] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6670'. [ 1074.170887][T31719] ipvlan2: entered promiscuous mode [ 1074.425225][T31734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6673'. [ 1074.644187][T31740] syzkaller0: entered promiscuous mode [ 1074.649731][T31740] syzkaller0: entered allmulticast mode [ 1075.107739][T31620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.117035][T31620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.125377][T31620] bridge_slave_0: entered allmulticast mode [ 1075.137132][T31620] bridge_slave_0: entered promiscuous mode [ 1075.149189][T30573] Bluetooth: hci2: command tx timeout [ 1075.179343][T31760] netlink: 'syz.0.6679': attribute type 4 has an invalid length. [ 1075.182774][T31620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.196042][T31620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.206457][T31620] bridge_slave_1: entered allmulticast mode [ 1075.214576][T31620] bridge_slave_1: entered promiscuous mode [ 1075.232305][T31760] netlink: 'syz.0.6679': attribute type 4 has an invalid length. [ 1075.433306][T31760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6679'. [ 1075.444132][T31620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.451424][T31760] netlink: 'syz.0.6679': attribute type 5 has an invalid length. [ 1075.461131][T31760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6679'. [ 1075.474415][T31620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.528577][T27696] net_ratelimit: 5 callbacks suppressed [ 1075.528598][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.561257][T31768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.669723][T31760] geneve2: entered promiscuous mode [ 1075.675011][T31760] geneve2: entered allmulticast mode [ 1075.698105][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1075.716131][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1075.747136][T31620] team0: Port device team_slave_0 added [ 1075.756212][T31620] team0: Port device team_slave_1 added [ 1075.785751][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.819084][T31620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.826124][T31620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.905920][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.948473][T31777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.957290][T31777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.966088][T31777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.026120][T31620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.037323][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1076.047322][T21490] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1076.146375][T31776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.157280][T31776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.190355][T31620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.197377][T31620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.279573][T31620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.303231][T31786] syzkaller0: entered promiscuous mode [ 1076.308775][T31786] syzkaller0: entered allmulticast mode [ 1076.487571][T31789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.822972][T31620] hsr_slave_0: entered promiscuous mode [ 1076.829954][T31620] hsr_slave_1: entered promiscuous mode [ 1076.836624][T31620] debugfs: 'hsr0' already exists in 'hsr' [ 1076.842444][T31620] Cannot create hsr debugfs directory [ 1076.950273][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.045270][T31805] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1077.284258][T30573] Bluetooth: hci2: command tx timeout [ 1077.349228][T31620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.380968][T31620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.541187][T31620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.551523][T31620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.801829][T31620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.835127][T31620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.227839][T31827] netlink: 'syz.4.6703': attribute type 83 has an invalid length. [ 1078.252841][T31827] netlink: 'syz.4.6703': attribute type 83 has an invalid length. [ 1078.563127][T31842] FAULT_INJECTION: forcing a failure. [ 1078.563127][T31842] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.583754][T31842] CPU: 1 UID: 0 PID: 31842 Comm: syz.4.6709 Not tainted syzkaller #0 PREEMPT(full) [ 1078.583783][T31842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1078.583797][T31842] Call Trace: [ 1078.583806][T31842] [ 1078.583815][T31842] dump_stack_lvl+0xe8/0x150 [ 1078.583853][T31842] should_fail_ex+0x40c/0x560 [ 1078.583886][T31842] should_failslab+0xa8/0x100 [ 1078.583922][T31842] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1078.583950][T31842] ? __inet_hash_connect+0xe9b/0x25a0 [ 1078.583976][T31842] ? __inet_hash_connect+0xe9b/0x25a0 [ 1078.584011][T31842] __inet_hash_connect+0xe9b/0x25a0 [ 1078.584043][T31842] ? __pfx___inet6_check_established+0x10/0x10 [ 1078.584078][T31842] ? __inet_hash_connect+0x5ce/0x25a0 [ 1078.584114][T31842] ? __pfx___inet_hash_connect+0x10/0x10 [ 1078.584140][T31842] ? sk_setup_caps+0x94f/0xbc0 [ 1078.584160][T31842] ? inet6_ehashfn+0x2f/0x3b0 [ 1078.584197][T31842] ? inet6_hash_connect+0xeb/0x170 [ 1078.584224][T31842] tcp_v6_connect+0x1231/0x1cf0 [ 1078.584245][T31842] ? sock_sendmsg_nosec+0x90/0x180 [ 1078.584271][T31842] ? ____sys_sendmsg+0x54e/0x850 [ 1078.584308][T31842] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1078.584345][T31842] __inet_stream_connect+0x258/0xe00 [ 1078.584388][T31842] ? rcu_is_watching+0x15/0xb0 [ 1078.584421][T31842] ? __pfx___inet_stream_connect+0x10/0x10 [ 1078.584451][T31842] ? __kasan_kmalloc+0x93/0xb0 [ 1078.584482][T31842] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1078.584510][T31842] ? __kmalloc_cache_noprof+0x150/0x660 [ 1078.584537][T31842] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1078.584580][T31842] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1078.584628][T31842] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 1078.584655][T31842] ? tcp_sendmsg_locked+0x631/0x55c0 [ 1078.584681][T31842] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1078.584715][T31842] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1078.584745][T31842] ? current_check_access_socket+0x26a/0xdf0 [ 1078.584775][T31842] ? __lock_acquire+0x683/0x2cf0 [ 1078.584833][T31842] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1078.584863][T31842] ? tcp_sendmsg+0x21/0x50 [ 1078.584887][T31842] ? __local_bh_enable_ip+0xd0/0x130 [ 1078.584917][T31842] tcp_sendmsg+0x2f/0x50 [ 1078.584937][T31842] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1078.584958][T31842] sock_sendmsg_nosec+0x90/0x180 [ 1078.584987][T31842] ____sys_sendmsg+0x54e/0x850 [ 1078.585014][T31842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1078.585047][T31842] ? import_iovec+0x73/0xa0 [ 1078.585085][T31842] ___sys_sendmsg+0x2a5/0x360 [ 1078.585106][T31842] ? __lock_acquire+0x683/0x2cf0 [ 1078.585140][T31842] ? __pfx____sys_sendmsg+0x10/0x10 [ 1078.585168][T31842] ? kstrtouint+0x6e/0xe0 [ 1078.585223][T31842] ? __fget_files+0x2a/0x420 [ 1078.585250][T31842] ? __fget_files+0x3a2/0x420 [ 1078.585288][T31842] __sys_sendmmsg+0x273/0x4d0 [ 1078.585317][T31842] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1078.585350][T31842] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1078.585388][T31842] ? ksys_write+0x242/0x270 [ 1078.585425][T31842] ? __pfx_ksys_write+0x10/0x10 [ 1078.585465][T31842] __x64_sys_sendmmsg+0xa0/0xc0 [ 1078.585487][T31842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.585511][T31842] do_syscall_64+0x174/0x580 [ 1078.585533][T31842] ? clear_bhb_loop+0x40/0x90 [ 1078.585560][T31842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.585583][T31842] RIP: 0033:0x7fe082d9de99 [ 1078.585603][T31842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.585637][T31842] RSP: 002b:00007fe080ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1078.585661][T31842] RAX: ffffffffffffffda RBX: 00007fe083025fa0 RCX: 00007fe082d9de99 [ 1078.585676][T31842] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 1078.585689][T31842] RBP: 00007fe080ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.585710][T31842] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 1078.585724][T31842] R13: 00007fe083026038 R14: 00007fe083025fa0 R15: 00007ffe50c02188 [ 1078.585760][T31842] [ 1078.587668][T31620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1078.714784][T31841] netlink: 'syz.2.6710': attribute type 1 has an invalid length. [ 1078.714810][T31841] __nla_validate_parse: 3 callbacks suppressed [ 1078.714823][T31841] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6710'. [ 1078.961817][T31620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.173423][T31841] netlink: 'syz.2.6710': attribute type 1 has an invalid length. [ 1079.357302][T30573] Bluetooth: hci2: command tx timeout [ 1079.428199][ T29] audit: type=1800 audit(1784561807.617:7): pid=31857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6713" name="memory.events" dev="tmpfs" ino=282 res=0 errno=0 [ 1079.470965][T31857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6713'. [ 1079.782168][T31620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1079.876153][T31620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1079.920382][T31620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1079.981889][T31620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1080.011282][T31620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1080.108800][T31620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1080.153016][T31620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1080.183011][T31882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 1080.199775][T31620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1080.418520][T31897] tap0: tun_chr_ioctl cmd 1074025676 [ 1080.424848][T31897] tap0: owner set to 0 [ 1080.436907][T31898] tipc: Started in network mode [ 1080.443211][T31898] tipc: Node identity JtiPHd, cluster identity 3539 [ 1080.450023][T31898] tipc: Enabled bearer , priority 0 [ 1080.628048][T31901] netlink: 'syz.5.6721': attribute type 23 has an invalid length. [ 1080.745707][T31898] syzkaller0: entered promiscuous mode [ 1080.751265][T31898] syzkaller0: entered allmulticast mode [ 1080.762003][T31898] tipc: Resetting bearer [ 1080.867178][T31892] tipc: Resetting bearer [ 1080.954343][T31910] FAULT_INJECTION: forcing a failure. [ 1080.954343][T31910] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.967156][T31910] CPU: 0 UID: 0 PID: 31910 Comm: syz.0.6728 Not tainted syzkaller #0 PREEMPT(full) [ 1080.967185][T31910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1080.967198][T31910] Call Trace: [ 1080.967206][T31910] [ 1080.967215][T31910] dump_stack_lvl+0xe8/0x150 [ 1080.967252][T31910] should_fail_ex+0x40c/0x560 [ 1080.967283][T31910] should_failslab+0xa8/0x100 [ 1080.967317][T31910] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1080.967347][T31910] ? ip6_default_advmss+0x80/0x3b0 [ 1080.967378][T31910] ? __alloc_skb+0x1d7/0x7a0 [ 1080.967405][T31910] ? __alloc_skb+0x1d7/0x7a0 [ 1080.967442][T31910] __alloc_skb+0x1d7/0x7a0 [ 1080.967478][T31910] tcp_stream_alloc_skb+0x3f/0x580 [ 1080.967512][T31910] ? __asan_memset+0x22/0x50 [ 1080.967539][T31910] tcp_connect+0x1582/0x53e0 [ 1080.967591][T31910] ? ktime_get_with_offset+0x93/0x2d0 [ 1080.967628][T31910] ? __pfx_tcp_connect+0x10/0x10 [ 1080.967660][T31910] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1080.967687][T31910] ? lockdep_hardirqs_on+0x7a/0x110 [ 1080.967720][T31910] ? ktime_get_with_offset+0x93/0x2d0 [ 1080.967746][T31910] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1080.967783][T31910] ? __asan_memset+0x22/0x50 [ 1080.967813][T31910] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1080.967849][T31910] ? inet6_hash_connect+0xeb/0x170 [ 1080.967876][T31910] tcp_v6_connect+0x14ed/0x1cf0 [ 1080.967896][T31910] ? sock_sendmsg_nosec+0x90/0x180 [ 1080.967929][T31910] ? ____sys_sendmsg+0x54e/0x850 [ 1080.967966][T31910] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1080.968002][T31910] __inet_stream_connect+0x258/0xe00 [ 1080.968043][T31910] ? rcu_is_watching+0x15/0xb0 [ 1080.968076][T31910] ? __pfx___inet_stream_connect+0x10/0x10 [ 1080.968105][T31910] ? __kasan_kmalloc+0x93/0xb0 [ 1080.968136][T31910] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1080.968164][T31910] ? __kmalloc_cache_noprof+0x150/0x660 [ 1080.968190][T31910] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1080.968232][T31910] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1080.968273][T31910] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 1080.968298][T31910] ? tcp_sendmsg_locked+0x631/0x55c0 [ 1080.968323][T31910] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1080.968356][T31910] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1080.968386][T31910] ? current_check_access_socket+0x26a/0xdf0 [ 1080.968415][T31910] ? __lock_acquire+0x683/0x2cf0 [ 1080.968477][T31910] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1080.968507][T31910] ? tcp_sendmsg+0x21/0x50 [ 1080.968531][T31910] ? __local_bh_enable_ip+0xd0/0x130 [ 1080.968559][T31910] tcp_sendmsg+0x2f/0x50 [ 1080.968581][T31910] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1080.968599][T31910] sock_sendmsg_nosec+0x90/0x180 [ 1080.968629][T31910] ____sys_sendmsg+0x54e/0x850 [ 1080.968656][T31910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1080.968688][T31910] ? import_iovec+0x73/0xa0 [ 1080.968724][T31910] ___sys_sendmsg+0x2a5/0x360 [ 1080.968763][T31910] ? __lock_acquire+0x683/0x2cf0 [ 1080.968798][T31910] ? __pfx____sys_sendmsg+0x10/0x10 [ 1080.968826][T31910] ? kstrtouint+0x6e/0xe0 [ 1080.968883][T31910] ? __fget_files+0x2a/0x420 [ 1080.968911][T31910] ? __fget_files+0x3a2/0x420 [ 1080.968963][T31910] __sys_sendmmsg+0x273/0x4d0 [ 1080.968993][T31910] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1080.969027][T31910] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1080.969066][T31910] ? ksys_write+0x242/0x270 [ 1080.969118][T31910] ? __pfx_ksys_write+0x10/0x10 [ 1080.969160][T31910] __x64_sys_sendmmsg+0xa0/0xc0 [ 1080.969183][T31910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.969207][T31910] do_syscall_64+0x174/0x580 [ 1080.969228][T31910] ? trace_irq_disable+0x3b/0x140 [ 1080.969256][T31910] ? clear_bhb_loop+0x40/0x90 [ 1080.969284][T31910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.969307][T31910] RIP: 0033:0x7fbf5699de99 [ 1080.969327][T31910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.969348][T31910] RSP: 002b:00007fbf54bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1080.969370][T31910] RAX: ffffffffffffffda RBX: 00007fbf56c25fa0 RCX: 00007fbf5699de99 [ 1080.969387][T31910] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 1080.969401][T31910] RBP: 00007fbf54bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.969415][T31910] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 1080.969428][T31910] R13: 00007fbf56c26038 R14: 00007fbf56c25fa0 R15: 00007fff932560e8 [ 1080.969466][T31910] [ 1081.205464][T27691] net_ratelimit: 4 callbacks suppressed [ 1081.205525][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.775718][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.784203][T30573] Bluetooth: hci2: command tx timeout [ 1082.015666][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.251937][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.332524][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.431361][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.840634][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.495342][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.509125][T31892] tipc: Disabling bearer [ 1086.535954][T27695] tipc: Node number set to 34629968 [ 1086.601748][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.747164][T31620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.767061][T31620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.782236][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.790205][ T9065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.842569][T31937] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20000 [ 1086.905730][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.912927][ T9069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.010448][T31620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1087.611827][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.918501][T31961] syzkaller0: entered promiscuous mode [ 1087.924051][T31961] syzkaller0: entered allmulticast mode [ 1087.955833][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.069258][T31976] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6740'. [ 1088.691750][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.834506][T32001] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1088.844402][T32002] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1089.159802][T32008] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 1089.828540][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.934343][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.000774][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.050160][T27691] net_ratelimit: 1 callbacks suppressed [ 1092.050211][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.175634][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.577523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.686938][T31620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.969538][T31620] veth0_vlan: entered promiscuous mode [ 1094.035309][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.043886][T31620] veth1_vlan: entered promiscuous mode [ 1094.249872][T31620] veth0_macvtap: entered promiscuous mode [ 1094.264358][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.318065][T31620] veth1_macvtap: entered promiscuous mode [ 1094.425460][T32040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6757'. [ 1094.525582][T31620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.556413][T32045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.568712][T32045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.599684][T31620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.647742][T21485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.664469][T32045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.684512][T32045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.695522][T32045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.735205][T32048] veth1_to_bond: entered promiscuous mode [ 1094.763760][T21485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.775251][T32049] veth1_to_bond: entered allmulticast mode [ 1094.796459][T21485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.852817][ T1009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.120767][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.128660][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.220696][T32047] veth1_to_bond: left allmulticast mode [ 1095.226365][T32047] veth1_to_bond: left promiscuous mode [ 1095.234001][ T9067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.252335][ T9067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.651650][T32079] syzkaller0: entered promiscuous mode [ 1095.657199][T32079] syzkaller0: entered allmulticast mode [ 1095.953787][T32087] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6770'. [ 1096.146552][T32085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6769'. [ 1096.155582][T32085] netlink: 'syz.0.6769': attribute type 7 has an invalid length. [ 1096.205142][T32095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6772'. [ 1096.340348][T32085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6769'. [ 1096.447273][T30946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1096.462767][T30946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1096.471342][T30946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1096.479559][T30946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1096.487353][T30946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1097.080332][T27700] net_ratelimit: 6 callbacks suppressed [ 1097.080354][T27700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.154441][T32122] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1097.483422][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.920949][T32134] tipc: Enabled bearer , priority 0 [ 1097.982483][T32143] netlink: 'syz.3.6783': attribute type 10 has an invalid length. [ 1098.066557][T27700] IPVS: starting estimator thread 0... [ 1098.097183][T32143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.106386][T32143] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1098.115489][T32137] syzkaller0: entered promiscuous mode [ 1098.120997][T32137] syzkaller0: entered allmulticast mode [ 1098.137338][T32148] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20004 [ 1098.262971][T32143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.434752][T32149] IPVS: using max 25 ests per chain, 60000 per kthread [ 1098.479209][T32143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.491562][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.596315][T32143] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1098.628997][T32143] bond0 (unregistering): Released all slaves [ 1098.667355][T30573] Bluetooth: hci0: command tx timeout [ 1098.676465][T24882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.738910][T32131] tipc: Resetting bearer [ 1098.804978][T32131] tipc: Disabling bearer [ 1098.916272][T32097] wg2 speed is unknown, defaulting to 1000 [ 1099.309535][T32179] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6789'. [ 1099.542363][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.654105][T32189] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1099.662646][T32189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1100.581983][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.873639][T30573] Bluetooth: hci0: command tx timeout [ 1101.154232][T32199] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1101.238415][T32214] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6799'. [ 1101.532778][T32213] syzkaller1: entered promiscuous mode [ 1101.540018][T32213] syzkaller1: entered allmulticast mode [ 1101.583206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.651363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.938008][T32097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.966896][T32097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.979196][T32097] bridge_slave_0: entered allmulticast mode [ 1101.993735][T32097] bridge_slave_0: entered promiscuous mode [ 1102.004005][T32097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.012691][T32097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.021473][T32097] bridge_slave_1: entered allmulticast mode [ 1102.034169][T32097] bridge_slave_1: entered promiscuous mode [ 1102.208563][T32097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.229735][T32097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.354335][T32097] team0: Port device team_slave_0 added [ 1102.364145][T32097] team0: Port device team_slave_1 added [ 1102.465946][T32097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.501298][T32097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.568048][T32225] net_ratelimit: 3 callbacks suppressed [ 1102.568103][T32225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.598199][T32097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.649440][T32097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.660814][T32097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.714978][T32097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.741151][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.765744][T30573] Bluetooth: hci4: command 0x0406 tx timeout [ 1102.873650][T32097] hsr_slave_0: entered promiscuous mode [ 1102.880567][T32097] hsr_slave_1: entered promiscuous mode [ 1102.887123][T32097] debugfs: 'hsr0' already exists in 'hsr' [ 1102.892925][T32097] Cannot create hsr debugfs directory [ 1102.991243][T30946] Bluetooth: hci0: command tx timeout [ 1103.317051][T32238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.816027][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.842277][T32097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.857479][T32097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.870843][T32097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1104.018399][T32255] sctp: [Deprecated]: syz.0.6810 (pid 32255) Use of int in max_burst socket option deprecated. [ 1104.018399][T32255] Use struct sctp_assoc_value instead [ 1104.219446][T32263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6811'. [ 1104.260273][T32097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.270614][T32097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.280951][T32097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1104.490701][T32097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.501045][T32097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.511308][T32097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1104.563915][T32266] syzkaller0: entered promiscuous mode [ 1104.570222][T32266] syzkaller0: entered allmulticast mode [ 1104.693813][T32097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.704226][T32097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.714504][T32097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1104.774738][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.832329][T32269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.949016][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.001964][T30946] Bluetooth: hci0: command tx timeout [ 1105.089216][T32275] tipc: Started in network mode [ 1105.095352][T32275] tipc: Node identity 22754cec3ab7, cluster identity 4711 [ 1105.104895][T32275] tipc: Enabled bearer , priority 0 [ 1105.127765][T32276] syzkaller1: entered promiscuous mode [ 1105.133388][T32276] syzkaller1: entered allmulticast mode [ 1105.142072][T32275] syzkaller0: entered promiscuous mode [ 1105.147599][T32275] syzkaller0: entered allmulticast mode [ 1105.190021][T32275] tipc: Resetting bearer [ 1105.209885][T32274] tipc: Resetting bearer [ 1105.293551][T32274] tipc: Disabling bearer [ 1105.378444][T32278] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6817'. [ 1105.426221][T32097] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1105.438610][T32097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1105.464467][T32097] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1105.481949][T32097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1105.508046][T32097] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1105.521846][T32097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1105.530049][T32097] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1105.548780][T32097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1105.710901][T24882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.914443][T32097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.937880][T32097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.951722][ T9067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.958946][ T9067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.977927][T21485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.985137][T21485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.014044][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.384165][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.732618][T32313] syzkaller0: entered promiscuous mode [ 1106.738172][T32313] syzkaller0: entered allmulticast mode [ 1106.745472][T32308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6825'. [ 1107.281959][T32337] netlink: 'syz.3.6831': attribute type 4 has an invalid length. [ 1107.291850][T32335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6833'. [ 1107.414354][T32339] netlink: 'syz.4.6832': attribute type 142 has an invalid length. [ 1107.642201][T32345] Bluetooth: MGMT ver 1.23 [ 1107.795523][T32097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.941837][T24882] net_ratelimit: 1 callbacks suppressed [ 1107.941859][T24882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.965285][T32364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6838'. [ 1108.191902][T32097] veth0_vlan: entered promiscuous mode [ 1108.207736][T32097] veth1_vlan: entered promiscuous mode [ 1108.208452][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.244113][T32097] veth0_macvtap: entered promiscuous mode [ 1108.299121][T32097] veth1_macvtap: entered promiscuous mode [ 1108.396341][T32097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.409915][T32097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.456399][T32373] netlink: 'syz.3.6839': attribute type 1 has an invalid length. [ 1108.500840][ T9069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.535295][T32377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6840'. [ 1108.566060][ T9069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.596586][ T9069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.709322][ T9069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.931780][T32382] netlink: 'syz.3.6842': attribute type 1 has an invalid length. [ 1108.939610][T32382] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6842'. [ 1108.967071][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.993494][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.001375][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.122297][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.130183][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.243559][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.362585][T32394] bond1 (unregistering): Released all slaves [ 1109.392151][T32400] x_tables: unsorted underflow at hook 3 [ 1109.595296][T32402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6849'. [ 1109.672640][T32406] openvswitch: netlink: IP tunnel dst address not specified [ 1109.680057][T32406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1109.803889][T32416] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1110.061977][T32426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6855'. [ 1110.092985][T32432] sctp: [Deprecated]: syz.3.6852 (pid 32432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1110.092985][T32432] Use struct sctp_sack_info instead [ 1110.119815][T32435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.135624][T32431] macvtap0: entered allmulticast mode [ 1110.141082][T32431] veth0_macvtap: entered allmulticast mode [ 1110.362129][T27693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.486131][T32439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6858'. [ 1110.683075][T32439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6858'. [ 1110.709093][T32448] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6860'. [ 1111.484035][T27693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.060936][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.612815][T27690] net_ratelimit: 1 callbacks suppressed [ 1113.612854][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.654989][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.172195][T27687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.510631][T32439] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1115.537470][T32452] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1115.685663][T32459] xt_hashlimit: size too large, truncated to 1048576 [ 1115.727493][T27693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.867826][T32463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6863'. [ 1115.979647][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.114631][T32473] syzkaller1: entered promiscuous mode [ 1116.120204][T32473] syzkaller1: entered allmulticast mode [ 1116.802667][T32490] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1116.814352][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.840672][T32490] bond0 (unregistering): Released all slaves [ 1116.893484][T32487] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6872'. [ 1116.912071][T32485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6872'. [ 1117.268368][T32508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6877'. [ 1117.471115][T32514] nbd: must specify a device to reconfigure [ 1117.886042][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.034900][T32536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6885'. [ 1118.067467][T32537] ip6t_srh: unknown srh invflags 4000 [ 1118.358775][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.646014][T32550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6895'. [ 1118.892699][T27693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.977041][T32582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6902'. [ 1118.985984][T32582] netlink: 'syz.0.6902': attribute type 9 has an invalid length. [ 1119.003314][T32579] nbd: couldn't find device at index 2 [ 1119.090477][T32578] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.6899'. [ 1119.169135][T32578] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6899'. [ 1119.458100][T32595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.487303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.631118][T30946] Bluetooth: hci3: link tx timeout [ 1119.636392][T30946] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1119.665066][T32598] veth0: entered promiscuous mode [ 1119.842630][T32601] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1119.908479][T32601] bond3 (unregistering): Released all slaves [ 1119.969716][T27693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.277558][T32591] veth0: left promiscuous mode [ 1121.041277][T32632] tipc: Enabling of bearer rejected, failed to enable media [ 1121.215137][T32636] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 1121.223411][T32635] tipc: Enabling of bearer rejected, failed to enable media [ 1121.242030][T32636] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6914'. [ 1121.419357][T27687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.652913][T30946] Bluetooth: hci3: command 0x0406 tx timeout [ 1121.899344][T32653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6916'. [ 1122.322187][T32670] netlink: 'syz.5.6921': attribute type 1 has an invalid length. [ 1122.682661][T32681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6921'. [ 1122.940837][T32682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6923'. [ 1123.042797][T32670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1123.239247][T32674] bond1: (slave veth0_to_bond): making interface the new active one [ 1123.259216][T32674] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1123.460143][T32675] bond1: entered promiscuous mode [ 1123.465299][T32675] veth0_to_bond: entered promiscuous mode [ 1123.471299][T32675] bond1: entered allmulticast mode [ 1123.476451][T32675] veth0_to_bond: entered allmulticast mode [ 1123.576415][T32681] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1123.645076][T32700] netlink: 'syz.3.6927': attribute type 1 has an invalid length. [ 1123.966549][T32700] bond0: entered promiscuous mode [ 1124.028412][T32700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.134085][T32700] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6927'. [ 1125.316179][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.263727][T27687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.279418][T32718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1127.441671][T24882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.482762][ T341] veth1_macvtap: left promiscuous mode [ 1128.686036][ T344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6941'. [ 1128.981307][ T350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6943'. [ 1129.707755][ T365] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6947'. [ 1129.993241][ T367] netlink: 'syz.2.6946': attribute type 1 has an invalid length. [ 1130.115065][ T377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6949'. [ 1130.124000][ T377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6949'. [ 1130.132899][ T377] netlink: 'syz.4.6949': attribute type 15 has an invalid length. [ 1130.269630][ T380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6949'. [ 1130.348466][ T383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6951'. [ 1130.810895][ T393] openvswitch: netlink: IP tunnel TTL not specified. [ 1131.213090][ T398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6951'. [ 1131.544040][ T398] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6951'. [ 1131.592501][T24882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.608619][ T398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6951'. [ 1131.899195][ T378] veth3: entered allmulticast mode [ 1131.937025][ T378] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1132.230545][ C1] sched: DL replenish lagged too much [ 1132.517957][ T387] bond1: (slave veth0_to_bond): making interface the new active one [ 1132.527266][ T387] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1132.873674][ T9067] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1132.905172][ T9067] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1132.916600][ T9067] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1133.024617][ T9067] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1133.526552][ T431] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1133.923023][ T434] wlan1 speed is unknown, defaulting to 1000 [ 1133.929162][ T434] wlan1 speed is unknown, defaulting to 1000 [ 1133.936125][ T434] wlan1 speed is unknown, defaulting to 1000 [ 1134.032646][ T434] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1134.046975][ T434] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1134.237470][ T439] __nla_validate_parse: 2 callbacks suppressed [ 1134.237493][ T439] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6959'. [ 1134.252945][ T434] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1134.276392][ T434] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1134.385258][ T444] netlink: 'syz.2.6960': attribute type 21 has an invalid length. [ 1134.393220][ T444] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6960'. [ 1134.394283][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.493361][ T434] wlan1 speed is unknown, defaulting to 1000 [ 1134.501401][ T434] wlan1 speed is unknown, defaulting to 1000 [ 1134.593061][ T434] wlan1 speed is unknown, defaulting to 1000 [ 1134.601108][ T434] wlan1 speed is unknown, defaulting to 1000 [ 1134.609267][ T434] wlan1 speed is unknown, defaulting to 1000 [ 1134.617227][ T434] wlan1 speed is unknown, defaulting to 1000 [ 1134.658436][T24882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.669568][ T448] syzkaller1: entered promiscuous mode [ 1134.675099][ T448] syzkaller1: entered allmulticast mode [ 1134.887212][ T450] netlink: 'syz.2.6962': attribute type 28 has an invalid length. [ 1134.895105][ T450] netlink: 'syz.2.6962': attribute type 3 has an invalid length. [ 1134.902907][ T450] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6962'. [ 1134.912467][ T434] wlan1 speed is unknown, defaulting to 1000 [ 1134.920553][ T434] wlan1 speed is unknown, defaulting to 1000 [ 1134.928559][ T434] wlan1 speed is unknown, defaulting to 1000 [ 1134.936739][ T434] wlan1 speed is unknown, defaulting to 1000 [ 1135.276003][ T458] netlink: 'syz.2.6965': attribute type 49 has an invalid length. [ 1135.296810][ T459] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 1136.468512][T21121] block nbd1: Receive control failed (result -110) [ 1137.811004][T24882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.493117][T24882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.155658][ T458] ip6gretap0: entered promiscuous mode [ 1140.161210][ T458] ip6gretap0: entered allmulticast mode [ 1140.218640][ T460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6966'. [ 1140.668148][ T493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6975'. [ 1140.792287][ T493] netlink: 252 bytes leftover after parsing attributes in process `syz.3.6975'. [ 1140.858722][ T493] xt_TCPMSS: Only works on TCP SYN packets [ 1140.961930][ T493] netlink: zone id is out of range [ 1140.967120][ T493] netlink: del zone limit has 4 unknown bytes [ 1141.642919][T21178] block nbd4: Receive control failed (result -110) [ 1141.728698][ T507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.074168][T27691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.110581][ T522] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6984'. [ 1144.131711][ T570] xt_cgroup: path and classid specified [ 1144.617734][ T580] ip6tnl1: entered allmulticast mode [ 1145.398932][ T598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1145.427074][ T602] netlink: 'syz.2.7003': attribute type 15 has an invalid length. [ 1145.722159][ T610] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.7006'. [ 1145.829182][ T613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7005'. [ 1145.841259][ T614] netlink: 'syz.2.7007': attribute type 12 has an invalid length. [ 1145.849140][ T614] netlink: 'syz.2.7007': attribute type 29 has an invalid length. [ 1145.856978][ T614] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7007'. [ 1145.866035][ T614] netlink: 'syz.2.7007': attribute type 3 has an invalid length. [ 1145.873790][ T614] netlink: 'syz.2.7007': attribute type 2 has an invalid length. [ 1145.881537][ T614] netlink: 35 bytes leftover after parsing attributes in process `syz.2.7007'. [ 1146.182519][ T618] netlink: 'syz.5.7008': attribute type 1 has an invalid length. [ 1146.393966][ T623] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1146.402299][ T623] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1146.410441][ T623] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1146.418636][ T623] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1146.426738][ T623] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1155.195316][T27687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.978799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.040224][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.913760][T27697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.468498][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.701544][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.897979][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.985469][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.159370][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.131261][T21121] Bluetooth: hci5: command tx timeout [ 1190.893042][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.009155][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.275397][ T6400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.875974][T24883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.218474][T27697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.110430][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1209.478472][T30573] Bluetooth: hci2: command 0x0406 tx timeout [ 1244.015273][ T6400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.182466][ T6400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.824805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.492245][T27690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.056538][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1319.063552][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P616/1:b..l [ 1319.071971][ C1] rcu: (detected by 1, t=10505 jiffies, g=214857, q=278848 ncpus=2) [ 1319.080091][ C1] task:syz.5.7008 state:R running task stack:24680 pid:616 tgid:616 ppid:30260 task_flags:0x400040 flags:0x00080002 [ 1319.095087][ C1] Call Trace: [ 1319.098437][ C1] [ 1319.101401][ C1] __schedule+0x17d9/0x56c0 [ 1319.105994][ C1] ? __pfx___schedule+0x10/0x10 [ 1319.110885][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1319.115952][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1319.121360][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1319.126771][ C1] preempt_schedule_common+0x82/0xd0 [ 1319.132100][ C1] ? nl80211_netlink_notify+0x49c/0x860 [ 1319.137686][ C1] preempt_schedule_thunk+0x16/0x40 [ 1319.143018][ C1] __local_bh_enable_ip+0xe1/0x130 [ 1319.148181][ C1] nl80211_netlink_notify+0x49c/0x860 [ 1319.153594][ C1] ? nl80211_netlink_notify+0x75/0x860 [ 1319.159081][ C1] notifier_call_chain+0x1a5/0x3d0 [ 1319.164228][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 1319.169957][ C1] netlink_release+0x11f8/0x1a80 [ 1319.174905][ C1] ? netlink_release+0x106/0x1a80 [ 1319.179949][ C1] ? __pfx_netlink_release+0x10/0x10 [ 1319.185326][ C1] ? down_write+0x16d/0x200 [ 1319.189831][ C1] ? __pfx_down_write+0x10/0x10 [ 1319.194691][ C1] sock_close+0xad/0x220 [ 1319.198947][ C1] ? __pfx_sock_close+0x10/0x10 [ 1319.203801][ C1] __fput+0x418/0xa50 [ 1319.207796][ C1] task_work_run+0x1d9/0x270 [ 1319.212403][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1319.217531][ C1] exit_to_user_mode_loop+0x1fa/0x730 [ 1319.222907][ C1] ? rcu_is_watching+0x15/0xb0 [ 1319.227678][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.233750][ C1] do_syscall_64+0x353/0x580 [ 1319.238352][ C1] ? trace_irq_disable+0x3b/0x140 [ 1319.243397][ C1] ? clear_bhb_loop+0x40/0x90 [ 1319.248108][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.254000][ C1] RIP: 0033:0x7fa555d9de99 [ 1319.258418][ C1] RSP: 002b:00007ffd532fe118 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1319.266829][ C1] RAX: 0000000000000000 RBX: 00007fa556027da0 RCX: 00007fa555d9de99 [ 1319.274802][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1319.282780][ C1] RBP: 00007fa556027da0 R08: 0000000000000006 R09: 0000000000000000 [ 1319.291029][ C1] R10: 00007fa556027cb0 R11: 0000000000000246 R12: 0000000000117fd7 [ 1319.299004][ C1] R13: 00007fa55602618c R14: 0000000000117e1f R15: 00007fa556026180 [ 1319.307008][ C1] [ 1319.310100][ C1] rcu: rcu_preempt kthread starved for 2278 jiffies! g214857 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1319.321507][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1319.331508][ C1] rcu: RCU grace-period kthread stack dump: [ 1319.337422][ C1] task:rcu_preempt state:R running task stack:28104 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1319.350980][ C1] Call Trace: [ 1319.354301][ C1] [ 1319.357266][ C1] __schedule+0x17d9/0x56c0 [ 1319.361820][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1319.366838][ C1] ? __pfx___schedule+0x10/0x10 [ 1319.371746][ C1] ? schedule+0x90/0x2b0 [ 1319.376034][ C1] schedule+0x164/0x2b0 [ 1319.380236][ C1] schedule_timeout+0x152/0x2c0 [ 1319.385137][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1319.390557][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1319.395899][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1319.401747][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1319.407346][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1319.412283][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1319.418491][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1319.423872][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1319.429143][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1319.433787][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1319.439125][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1319.444107][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1319.449177][ C1] kthread+0x388/0x470 [ 1319.453293][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1319.458531][ C1] ? __pfx_kthread+0x10/0x10 [ 1319.463169][ C1] ret_from_fork+0x514/0xb70 [ 1319.467806][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1319.472982][ C1] ? __switch_to+0xc89/0x1420 [ 1319.477718][ C1] ? __pfx_kthread+0x10/0x10 [ 1319.482352][ C1] ret_from_fork_asm+0x1a/0x30 [ 1319.487187][ C1] [ 1319.490246][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1319.496947][ C1] CPU: 1 UID: 0 PID: 29555 Comm: kworker/R-bond1 Not tainted syzkaller #0 PREEMPT(full) [ 1319.506773][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1319.516851][ C1] Workqueue: bond12 bond_3ad_state_machine_handler [ 1319.523394][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 1319.528714][ C1] Code: ff ff ff e8 61 8f 2d 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 9a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 98 ec b8 [ 1319.548360][ C1] RSP: 0018:ffffc90000a07f00 EFLAGS: 00000286 [ 1319.554469][ C1] RAX: 82bdbd19c9a9ca00 RBX: 0000000000000000 RCX: 0000000000000101 [ 1319.562479][ C1] RDX: 00000000a42637f2 RSI: ffffffff8e4b0ad7 RDI: ffffffff8c4bda80 [ 1319.570490][ C1] RBP: ffffffff8176f27f R08: ffffffff8176f27f R09: 0000000000000000 [ 1319.578498][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 1319.586506][ C1] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 [ 1319.594517][ C1] FS: 0000000000000000(0000) GS:ffff888125054000(0000) knlGS:0000000000000000 [ 1319.603482][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1319.610099][ C1] CR2: 000055555981f4e8 CR3: 0000000030f58000 CR4: 00000000003526f0 [ 1319.618111][ C1] Call Trace: [ 1319.621421][ C1] [ 1319.624298][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 1319.629482][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1319.634627][ C1] unwind_next_frame+0xac/0x2550 [ 1319.639598][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1319.644777][ C1] ? nft_do_chain+0x48d/0x1b10 [ 1319.649593][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1319.654742][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1319.660942][ C1] arch_stack_walk+0x11b/0x150 [ 1319.665745][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 1319.670904][ C1] stack_trace_save+0xa9/0x100 [ 1319.675710][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1319.681148][ C1] ? kfree+0x1c5/0x640 [ 1319.685273][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1319.690254][ C1] kasan_save_track+0x3e/0x80 [ 1319.694998][ C1] ? kasan_save_track+0x3e/0x80 [ 1319.699929][ C1] ? kasan_save_free_info+0x40/0x50 [ 1319.705161][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1319.710158][ C1] ? kmem_cache_free+0x182/0x650 [ 1319.715149][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 1319.720597][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 1319.726019][ C1] ? nft_do_chain+0x48d/0x1b10 [ 1319.730835][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 1319.736042][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 1319.741455][ C1] kasan_save_free_info+0x40/0x50 [ 1319.746520][ C1] __kasan_slab_free+0x5c/0x80 [ 1319.751329][ C1] kmem_cache_free+0x182/0x650 [ 1319.756144][ C1] nft_synproxy_eval_v4+0x36a/0x4e0 [ 1319.761393][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1319.767160][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1319.772066][ C1] nft_synproxy_do_eval+0x335/0x550 [ 1319.777394][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1319.783171][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1319.788155][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1319.793138][ C1] nft_do_chain+0x48d/0x1b10 [ 1319.797783][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1319.802845][ C1] ? lock_acquire+0x106/0x350 [ 1319.807568][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 1319.812404][ C1] nft_do_chain_inet+0x360/0x4b0 [ 1319.817388][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1319.822922][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 1319.827819][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 1319.833247][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1319.838750][ C1] nf_hook_slow+0xc5/0x220 [ 1319.843230][ C1] NF_HOOK+0x21f/0x3c0 [ 1319.847341][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1319.853367][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1319.857566][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1319.862284][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1319.868330][ C1] ? ip_local_deliver+0x113/0x190 [ 1319.873392][ C1] NF_HOOK+0x336/0x3c0 [ 1319.877529][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1319.882677][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1319.886875][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1319.891511][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1319.896660][ C1] ? ip_rcv_core+0x88d/0xd50 [ 1319.901296][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1319.905834][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1319.910379][ C1] process_backlog+0xa34/0x1860 [ 1319.915281][ C1] ? process_backlog+0x3c3/0x1860 [ 1319.920361][ C1] __napi_poll+0xaa/0x330 [ 1319.924731][ C1] net_rx_action+0x61d/0xf50 [ 1319.929376][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1319.934524][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1319.939609][ C1] ? net_tx_action+0xbff/0xc30 [ 1319.944413][ C1] handle_softirqs+0x225/0x840 [ 1319.949225][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1319.954037][ C1] __irq_exit_rcu+0xca/0x220 [ 1319.958671][ C1] irq_exit_rcu+0x9/0x30 [ 1319.962950][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1319.968641][ C1] [ 1319.971604][ C1] [ 1319.974568][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1319.980610][ C1] RIP: 0010:__schedule+0x80/0x56c0 [ 1319.985767][ C1] Code: ed 98 47 8e 48 c7 84 24 30 01 00 00 30 8e d0 8b 4c 8d b4 24 20 01 00 00 49 c1 ee 03 48 b8 f1 f1 f1 f1 f8 f8 f8 f2 4b 89 04 2e <48> b8 f2 f2 f2 f2 f8 f8 f3 f3 4b 89 44 2e 08 66 43 c7 44 2e 0c 00 [ 1320.005430][ C1] RSP: 0018:ffffc900046cf680 EFLAGS: 00000a02 [ 1320.011544][ C1] RAX: f2f8f8f8f1f1f1f1 RBX: ffffffff81336f16 RCX: 0000000000000000 [ 1320.019561][ C1] RDX: 0000000000000006 RSI: ffffffff8e22b815 RDI: ffffc900046cf800 [ 1320.027626][ C1] RBP: ffffc900046cf880 R08: ffffffff905784f7 R09: 1ffffffff20af09e [ 1320.035642][ C1] R10: dffffc0000000000 R11: fffffbfff20af09f R12: ffff888037262d18 [ 1320.043654][ C1] R13: dffffc0000000000 R14: 1ffff920008d9ef4 R15: dffffc0000000000 [ 1320.051870][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1320.057404][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1320.062405][ C1] ? __pfx___schedule+0x10/0x10 [ 1320.067302][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1320.072291][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1320.077702][ C1] preempt_schedule_common+0x82/0xd0 [ 1320.083025][ C1] ? bond_3ad_state_machine_handler+0x5a7c/0x5d60 [ 1320.089479][ C1] preempt_schedule_thunk+0x16/0x40 [ 1320.095095][ C1] __local_bh_enable_ip+0xe1/0x130 [ 1320.100254][ C1] bond_3ad_state_machine_handler+0x5a7c/0x5d60 [ 1320.106547][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1320.111619][ C1] ? bond_3ad_state_machine_handler+0xd0/0x5d60 [ 1320.117918][ C1] ? __pfx_bond_3ad_state_machine_handler+0x10/0x10 [ 1320.124725][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1320.130495][ C1] ? rcu_is_watching+0x15/0xb0 [ 1320.135313][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1320.141072][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1320.146692][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1320.152738][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1320.157817][ C1] ? assign_work+0x3af/0x5d0 [ 1320.162451][ C1] rescuer_thread+0x7b6/0x10b0 [ 1320.167265][ C1] ? rescuer_thread+0xb8/0x10b0 [ 1320.172179][ C1] kthread+0x388/0x470 [ 1320.176297][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 1320.181539][ C1] ? __pfx_kthread+0x10/0x10 [ 1320.186213][ C1] ret_from_fork+0x514/0xb70 [ 1320.190852][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1320.196011][ C1] ? __switch_to+0xc89/0x1420 [ 1320.200735][ C1] ? __pfx_kthread+0x10/0x10 [ 1320.205371][ C1] ret_from_fork_asm+0x1a/0x30 [ 1320.210186][ C1] [ 1320.376613][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.502703][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.676586][T27694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.882348][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!